CVE-2017-4900 : VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer derefer

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Published 2017-06-07 18:29:00

Updated 2017-07-17 13:18:28

Source VMware

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2017-4900

Vmware » Workstation Pro » Version: 12.1.0
cpe:2.3:a:vmware:workstation_pro:12.1.0:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Pro » Version: 12.0.0
cpe:2.3:a:vmware:workstation_pro:12.0.0:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Pro » Version: 12.0.1
cpe:2.3:a:vmware:workstation_pro:12.0.1:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Pro » Version: 12.5.0
cpe:2.3:a:vmware:workstation_pro:12.5.0:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Pro » Version: 12.5.1
cpe:2.3:a:vmware:workstation_pro:12.5.1:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Pro » Version: 12.5.2
cpe:2.3:a:vmware:workstation_pro:12.5.2:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Player » Version: 12.1.0
cpe:2.3:a:vmware:workstation_player:12.1.0:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Player » Version: 12.0.0
cpe:2.3:a:vmware:workstation_player:12.0.0:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Player » Version: 12.0.1
cpe:2.3:a:vmware:workstation_player:12.0.1:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Player » Version: 12.5.0
cpe:2.3:a:vmware:workstation_player:12.5.0:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Player » Version: 12.5.1
cpe:2.3:a:vmware:workstation_player:12.5.1:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation Player » Version: 12.5.2
cpe:2.3:a:vmware:workstation_player:12.5.2:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-4900

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 11 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-4900

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2017-4900

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-4900

http://www.securitytracker.com/id/1037979

VMware Workstation SVGA and DLL Loading Bugs Let Local Users on the Guest System Deny Service on the Guest or Gain Elevated Privileges on the Host System - SecurityTracker

CVEs referencing this url
http://www.securityfocus.com/bid/96770

Multiple VMware Workstation Products CVE-2017-4900 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
http://www.vmware.com/security/advisories/VMSA-2017-0003.html

VMSA-2017-0003
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2017-4900

Products affected by CVE-2017-4900

Exploit prediction scoring system (EPSS) score for CVE-2017-4900

CVSS scores for CVE-2017-4900

CWE ids for CVE-2017-4900

References for CVE-2017-4900