CVE-2017-4898: High severity VMware Workstation Player vulnerability

Published Jun 7, 2017

Updated

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed.

Affected Software

12 affected components

VMware Workstation Player=12.0.0

VMware Workstation Player=12.0.1

VMware Workstation Player=12.1.0

VMware Workstation Player=12.5.0

VMware Workstation Player=12.5.1

VMware Workstation Player=12.5.2

VMware Workstation Pro=12.0.0

VMware Workstation Pro=12.0.1

VMware Workstation Pro=12.1.0

VMware Workstation Pro=12.5.0

VMware Workstation Pro=12.5.1

VMware Workstation Pro=12.5.2

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2017-0003.html

Event History

Jun 7, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-4898?

CVE-2017-4898 is classified as a privilege escalation vulnerability.

How do I fix CVE-2017-4898?

To fix CVE-2017-4898, you should upgrade VMware Workstation Pro/Player to version 12.5.3 or later.

Who is affected by CVE-2017-4898?

CVE-2017-4898 affects users of VMware Workstation Pro/Player versions 12.x prior to 12.5.3.

What could an attacker achieve by exploiting CVE-2017-4898?

Exploitation of CVE-2017-4898 may allow a normal user to escalate privileges to System level.

How does CVE-2017-4898 occur in VMware Workstation Pro/Player?

CVE-2017-4898 occurs due to the 'vmware-vmx' process loading DLLs from a path defined in the local environment-variable.