CVE-2017-4933
First published: Wed Dec 20 2017(Updated: )
VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a heap overflow via a specific set of VNC packets resulting in heap corruption. Successful exploitation of this issue could result in remote code execution in a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must be manually enabled in a virtual machine's .vmx configuration file. In addition, ESXi must be configured to allow VNC traffic through the built-in firewall.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workstation | >=12.0.0<12.5.8 | |
| VMware Workstation | =14.0 | |
| VMware Workstation | =14.1.0 | |
| VMware ESXi and Horizon DaaS | =6.5 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201701001 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201703001 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201703002 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201704001 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707101 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707102 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707103 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707201 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707202 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707203 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707204 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707205 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707206 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707207 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707208 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707209 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707210 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707211 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707212 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707213 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707214 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707215 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707216 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707217 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707218 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707219 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707220 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201707221 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201710001 | |
| VMware Fusion | >=8.0.0<8.5.9 | |
| Apple iOS and macOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-4933?
CVE-2017-4933 is a vulnerability in VMware ESXi, Workstation, and Fusion that allows an authenticated VNC session to cause a heap overflow resulting in heap corruption.
What is the severity of CVE-2017-4933?
The severity of CVE-2017-4933 is rated as high with a severity value of 8.8.
Which software versions are affected by CVE-2017-4933?
VMware ESXi versions 6.5, Workstation versions 12.x before 12.5.8, and Fusion versions 8.x before 8.5.9 are affected by CVE-2017-4933.
How can CVE-2017-4933 be exploited?
CVE-2017-4933 can be exploited through an authenticated VNC session using a specific set of VNC packets that cause a heap overflow and result in heap corruption.
Where can I find more information about CVE-2017-4933?
You can find more information about CVE-2017-4933 on the following references: [SecurityTracker ID 1040024](http://www.securitytracker.com/id/1040024), [SecurityTracker ID 1040025](http://www.securitytracker.com/id/1040025), and [VMware Advisory VMSA-2017-0021](https://www.vmware.com/security/advisories/VMSA-2017-0021.html).
- agent/type
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vmware
- canonical/vmware workstation
- version/vmware workstation/12.0.0
- version/vmware workstation/14.0
- version/vmware workstation/14.1.0
- canonical/vmware esxi and horizon daas
- version/vmware esxi and horizon daas/6.5
- version/vmware esxi and horizon daas/6.5-650-201701001
- version/vmware esxi and horizon daas/6.5-650-201703001
- version/vmware esxi and horizon daas/6.5-650-201703002
- version/vmware esxi and horizon daas/6.5-650-201704001
- version/vmware esxi and horizon daas/6.5-650-201707101
- version/vmware esxi and horizon daas/6.5-650-201707102
- version/vmware esxi and horizon daas/6.5-650-201707103
- version/vmware esxi and horizon daas/6.5-650-201707201
- version/vmware esxi and horizon daas/6.5-650-201707202
- version/vmware esxi and horizon daas/6.5-650-201707203
- version/vmware esxi and horizon daas/6.5-650-201707204
- version/vmware esxi and horizon daas/6.5-650-201707205
- version/vmware esxi and horizon daas/6.5-650-201707206
- version/vmware esxi and horizon daas/6.5-650-201707207
- version/vmware esxi and horizon daas/6.5-650-201707208
- version/vmware esxi and horizon daas/6.5-650-201707209
- version/vmware esxi and horizon daas/6.5-650-201707210
- version/vmware esxi and horizon daas/6.5-650-201707211
- version/vmware esxi and horizon daas/6.5-650-201707212
- version/vmware esxi and horizon daas/6.5-650-201707213
- version/vmware esxi and horizon daas/6.5-650-201707214
- version/vmware esxi and horizon daas/6.5-650-201707215
- version/vmware esxi and horizon daas/6.5-650-201707216
- version/vmware esxi and horizon daas/6.5-650-201707217
- version/vmware esxi and horizon daas/6.5-650-201707218
- version/vmware esxi and horizon daas/6.5-650-201707219
- version/vmware esxi and horizon daas/6.5-650-201707220
- version/vmware esxi and horizon daas/6.5-650-201707221
- version/vmware esxi and horizon daas/6.5-650-201710001
- canonical/vmware fusion
- version/vmware fusion/8.0.0
- vendor/apple
- canonical/apple ios and macos