Not rated
CVE-2017-4901 The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5…
Description
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability. This may allow a guest to execute code on the operating system that runs Workstation or Fusion.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Workstation Pro/Player | Versions not published | |
| Fusion Pro / Fusion | Versions not published |
References
- www.vmware.com www.vmware.com
- 1038025 www.securitytracker.com
- 96881 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Workstation Pro/Player
The 6 CVEs of Workstation Pro/Player →
CVE-2017-4899
VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver
Not rated
CVE-2017-4900
VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the…
Not rated
CVE-2017-4898
VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the…
Not rated
CVE-2017-4915
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration…
Not rated