medium6.5Public exploit code
CVE-2017-4916
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware Workstation 12 Pro - Denial of Service2017-06-08 · dos · windows · Verified
Impact
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workstation Player | Version 12.0.0 |
| Vmware | Workstation Pro | Version 12.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/98560
- http://www.securitytracker.com/id/1038526
- https://www.exploit-db.com/exploits/42140/
- https://www.vmware.com/security/advisories/VMSA-2017-0009.html
- http://www.securityfocus.com/bid/98560
- http://www.securitytracker.com/id/1038526
- https://www.exploit-db.com/exploits/42140/
- https://www.vmware.com/security/advisories/VMSA-2017-0009.html