Multiple VMware Workstation Products DLL Loading Local Privilege Escalation Vulnerability

Bugtraq ID:	98566
Class:	Input Validation Error
CVE:	CVE-2017-4915
Remote:	No
Local:	Yes
Published:	May 18 2017 12:00AM
Updated:	May 18 2017 12:00AM
Credit:	Jann Horn of Google Project Zero
Vulnerable:	VMWare Workstation Pro 12.5.3 VMWare Workstation Pro 12.5.2 VMWare Workstation Pro 12.1.1 VMWare Workstation Pro 12.1 VMWare Workstation Pro 12.5.4 VMWare Workstation Pro 12.5.0 VMWare Workstation Player 12.5.3 VMWare Workstation Player 12.5.2 VMWare Workstation Player 12.5 VMWare Workstation Player 12.1.1 VMWare Workstation Player 12.1 VMWare Workstation Player 12.5.4
Not Vulnerable:	VMWare Workstation Pro 12.5.6 VMWare Workstation Player 12.5.6

Multiple VMware Workstation Products DLL Loading Local Privilege Escalation Vulnerability

Multiple VMware Workstation Products are prone to a local privilege-escalation vulnerability.

A local attacker can leverage this issue to gain root privileges in the host machine.

Multiple VMware Workstation Products DLL Loading Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple VMware Workstation Products DLL Loading Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple VMware Workstation Products DLL Loading Local Privilege Escalation Vulnerability

References:

• VMware Homepage (VMware)
  
• VMware VMSA-2017-0009 (VMware )