CVE-2017-4924

VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host.

Score

CVSS 3.1 8.8 High

Status

Modified - security@vmware.com

Published

2017-09-15

Last modified

2024-09-17

Weaknesses

CWE-787

Affected products

• Esxi (Vmware)
• Fusion (Vmware)
• Workstation (Vmware)
• Workstation Pro (Vmware)

References

• http://www.securityfocus.com/bid/100843
• http://www.securitytracker.com/id/1039365
• http://www.securitytracker.com/id/1039366
• https://0patch.blogspot.com/2017/10/micropatching-hypervisor-with-running.html
• https://www.vmware.com/security/advisories/VMSA-2017-0015.html