CVE-2017-4902: Buffer Overflow
VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-4902?
CVE-2017-4902 is classified as critical due to the potential for guest code execution on the host.
How do I fix CVE-2017-4902?
To fix CVE-2017-4902, you should apply the appropriate patches: ESXi650-201703410-SG for ESXi 6.5 and ESXi550-201703401-SG for ESXi 5.5.
What products are affected by CVE-2017-4902?
CVE-2017-4902 affects VMware ESXi versions 5.5 and 6.5, as well as VMware Workstation Pro/Player 12.x and Fusion Pro/Fusion 8.x prior to specified versions.
Can CVE-2017-4902 be exploited remotely?
Yes, CVE-2017-4902 can potentially be exploited remotely by a malicious guest to execute arbitrary code on the host system.
What type of vulnerability is CVE-2017-4902?
CVE-2017-4902 is a heap buffer overflow vulnerability in the SVGA component of VMware products.