Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2017-4916

CWE-476 — NULL Pointer Dereference4 documents4 sources
Severity
6.5MEDIUM
EPSS
9.5%
top 7.17%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
3
Vmware Workstation Pro/playerVmware Workstation PlayerVmware Workstation PRO
Timeline
PublishedMay 22
Latest updateMay 17

Description

VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5vmware/workstation_pro/playerAll 12.x versions prior to version 12.5.6

Patches

Patch: www.vmware.com ↗Patch: www.vmware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mq2h-65qj-q6wr: VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver↗2022-05-17
▶
CVEList
CVE-2017-4916: VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver↗2017-05-22
▶

💥Exploits & PoCs

1
Exploit-DB
VMware Workstation 12 Pro - Denial of Service↗2017-06-08
▶
CVE-2017-4916 (MEDIUM CVSS 6.5) | VMware Workstation Pro/Player conta | cvebase.io