Multiple VMware Products CVE-2017-4933 Heap Buffer Overflow Vulnerability
BID:102240
Info
Multiple VMware Products CVE-2017-4933 Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 102240 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-4933 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 19 2017 12:00AM |
| Updated: | Dec 19 2017 12:00AM |
| Credit: | Lilith Wyatt of Cisco Talos. |
| Vulnerable: |
VMWare Workstation 12.5.7 VMWare Workstation 12.5.5 VMWare Workstation 12.5.3 VMWare Workstation 12.0 VMWare Fusion 8.5.8 VMWare Fusion 8.5.6 VMWare Fusion 8.5.4 VMWare Fusion 8.5.2 VMWare Fusion 8.1.1 VMWare Fusion 8.1 VMWare Fusion 8.0.2 VMWare Fusion 8.0.1 VMWare Fusion 8.5.5 VMWare Fusion 8.5 VMWare Fusion 8.0 VMWare Esxi 6.5 |
| Not Vulnerable: |
VMWare Workstation 12.5.8 VMWare Fusion 8.5.9 VMWare Esxi 6.5 ESXi650-201710401-BG |
Discussion
Multiple VMware Products CVE-2017-4933 Heap Buffer Overflow Vulnerability
Multiple VMware Products are prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Successfully exploiting this vulnerability can allow remote attackers to execute arbitrary code in the context of the application. Failed attempts will likely result in denial-of-service conditions.
The following products are vulnerable:
VMware ESXi 6.5
VMware Workstation 12.x
VMware Fusion 8.x
Multiple VMware Products are prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Successfully exploiting this vulnerability can allow remote attackers to execute arbitrary code in the context of the application. Failed attempts will likely result in denial-of-service conditions.
The following products are vulnerable:
VMware ESXi 6.5
VMware Workstation 12.x
VMware Fusion 8.x