high7.8Public exploit code
CVE-2017-4915
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware Workstation for Linux 12.5.2 build-4638234 - ALSA Configuration Host Local Privilege Escalation2017-05-22 · local · linux · Verified
- VMware Workstation/Player < 12.5.5 - Local Privilege Escalation2018-12-30 · local · multiple
Impact
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workstation Player | Version 12.0.0 |
| Vmware | Workstation Pro | Version 12.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/98566
- http://www.securitytracker.com/id/1038525
- https://www.exploit-db.com/exploits/42045/
- https://www.vmware.com/security/advisories/VMSA-2017-0009.html
- http://www.securityfocus.com/bid/98566
- http://www.securitytracker.com/id/1038525
- https://www.exploit-db.com/exploits/42045/
- https://www.vmware.com/security/advisories/VMSA-2017-0009.html