Not rated
CVE-2017-4950 VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled
Description
VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may lead to an out-of-bound read which can then be used to execute code on the host in conjunction with other issues. Note: IPv6 mode for VMNAT is not enabled by default.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Workstation Pro / Player | Versions not published | |
| Fusion | Versions not published |
References
- 1040161 www.securitytracker.com
- www.vmware.com www.vmware.com
- 102490 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Workstation Pro / Player
The 6 CVEs of Workstation Pro / Player →
CVE-2017-4949
VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled
Not rated
CVE-2017-4902
VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro /…
Not rated
CVE-2017-4903
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch…
Not rated
CVE-2017-4904
The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG,…
Not rated