CVE-2017-4899 in Workstation Pro

Prediction

by VulDB Data Team • 08/18/2020

A vulnerability was detected in VMware Workstation Pro and Workstation Player up to 12.5.2. The affected element is an unknown function of the component SVGA Driver. The manipulation results in out-of-bounds read. The attack needs to be approached locally. Upgrading to version 12.5.3 is sufficient to fix this issue. Upgrading the affected component is advised.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 12/26/2016
• Disclosure: 06/07/2017
• Moderation: accepted
• Entry: VDB-97819
• CPE: ready
• CWE: CWE-125 (confirmed)
• CVSS: 4.7 (NVD)
• EPSS: 0.00048
• KEV: no
• Activities: very low
• Sector: Telecommunication, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-4899
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-4899
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-4899/