CVE-2017-4898

High

Published: 07/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

VMware Workstation Pro/Player 12.x before version 12.5.3 contains a DLL loading vulnerability due to the 'vmware-vmx' process loading DLLs from a path defined in the local environment variable. Successful exploitation of this issue may allow normal users to escalate privileges to System on the host machine where VMware Workstation is installed.

Risk Assessment

This vulnerability poses a risk of privilege escalation, which could lead to unauthorized access to system resources. Organizations should be aware of the potential threats associated with unauthorized access to the system.

Recommendation

It is recommended to update VMware Workstation Pro/Player to version 12.5.3 or later to mitigate this vulnerability. Additionally, it is advisable to monitor and restrict access to environment variables that could be exploited for DLL loading.

Other vulnerabilities in VMware Workstation Pro/Player 12.x

CVE-2017-4915High
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine.

Original NVD description (English source)

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed.