CVE-2017-4905

Published: 07/06/2017 Updated: 07/02/2022

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x before 12.5.5; and Fusion Pro / Fusion 8.x before 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vmware fusion
vmware fusion pro
vmware esxi 6.0
vmware esxi 6.5
vmware esxi 5.5
vmware workstation player
vmware workstation pro

# VMware Escape Exploit VMware Escape Exploit before VMware WorkStation 1253 Host Target: Win10 x64 Compiler: VS2013 Test on VMware 1252 build-4638234 # Known issues * Failing to heap manipulation causes host process crash (About 50% successful rate ) * Not quite elaborate because I'm not good at doing heap "fengshui" on winows LFH # ...

CWE-908 http://www.vmware.com/security/advisories/VMSA-2017-0006.html http://www.securityfocus.com/bid/97164 http://www.securitytracker.com/id/1038149 http://www.securitytracker.com/id/1038148 https://nvd.nist.gov https://www.exploit-db.com/exploits/47715

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-4905

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect