CVE-2017-4899: Medium severity VMware Workstation Player vulnerability

Published Jun 7, 2017

Updated

VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers are installed.

Affected Software

10 affected components

VMware Workstation Player=12.0.0

VMware Workstation Player=12.0.1

VMware Workstation Player=12.1.0

VMware Workstation Player=12.5.0

VMware Workstation Player=12.5.1

VMware Workstation Pro=12.0.0

VMware Workstation Pro=12.0.1

VMware Workstation Pro=12.1.0

VMware Workstation Pro=12.5.0

VMware Workstation Pro=12.5.1

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2017-0003.html

Event History

Jun 7, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-4899?

CVE-2017-4899 has a high severity rating due to its potential to crash virtual machines.

How do I fix CVE-2017-4899?

To fix CVE-2017-4899, upgrade VMware Workstation Pro/Player to version 12.5.3 or later.

What does CVE-2017-4899 affect?

CVE-2017-4899 affects VMware Workstation Pro and Player versions 12.0.0 through 12.5.1.

What type of vulnerability is CVE-2017-4899?

CVE-2017-4899 is a vulnerability in the SVGA driver that can lead to a crash or out-of-bound read.

Can CVE-2017-4899 be exploited easily?

CVE-2017-4899 can only be exploited when the host has no graphics card or graphics drivers.