Published: 22/05/2017 Updated: 13/08/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 685

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C

VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vmware workstation_pro 12.0.0
vmware workstation_player 12.0.0

/* * Title: NULL pointer dereference vulnerability in vstor2 driver (VMware Workstation Pro/Player) * CVE: 2017-4916 (VMSA-2017-0009) * Author: Borja Merino (@BorjaMerino) * Date: May 18, 2017 * Tested on: Windows 10 Pro and Windows 7 Pro (SP1) with VMware® Workstation 12 Pro (1255 build-5234757) * Affected: VMware Workstation Pro/Player 1 ...

CWE-476 https://www.vmware.com/security/advisories/VMSA-2017-0009.html http://www.securityfocus.com/bid/98560 http://www.securitytracker.com/id/1038526 https://www.exploit-db.com/exploits/42140/https://nvd.nist.gov https://www.exploit-db.com/exploits/42140/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-4916

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect