CVE-2017-4900

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Score

CVSS 3.0 5.5 Medium

Status

Modified - security@vmware.com

Published

2017-06-07

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Workstation Player (Vmware)
• Workstation Pro (Vmware)
• Workstation Proplayer (Vmware)

References

• http://www.securityfocus.com/bid/96770
• http://www.securitytracker.com/id/1037979
• http://www.vmware.com/security/advisories/VMSA-2017-0003.html