CVE-2017-4900: Null Pointer Dereference
Published Jun 7, 2017
·Updated
VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
Affected Software
12 affected components
VMware Workstation Player=12.0.0
VMware Workstation Player=12.0.1
VMware Workstation Player=12.1.0
VMware Workstation Player=12.5.0
VMware Workstation Player=12.5.1
VMware Workstation Player=12.5.2
VMware Workstation Pro=12.0.0
VMware Workstation Pro=12.0.1
VMware Workstation Pro=12.1.0
VMware Workstation Pro=12.5.0
VMware Workstation Pro=12.5.1
VMware Workstation Pro=12.5.2
Remediation
Event History
Jun 7, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-4900?
CVE-2017-4900 has a severity rating that indicates it can lead to crashing virtual machines.
2
How do I fix CVE-2017-4900?
To fix CVE-2017-4900, upgrade VMware Workstation Pro/Player to version 12.5.3 or higher.
3
What versions of VMware are affected by CVE-2017-4900?
CVE-2017-4900 affects VMware Workstation Pro/Player versions 12.0.0 through 12.5.2.
4
Can CVE-2017-4900 be exploited by a normal user?
Yes, CVE-2017-4900 can be exploited by attackers with normal user privileges.
5
What type of vulnerability is CVE-2017-4900?
CVE-2017-4900 is a NULL pointer dereference vulnerability found in the SVGA driver.