CVE-2017-4901
CriticalSummary
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability. This may allow a guest to execute code on the operating system that runs Workstation or Fusion.
Risk Assessment
This vulnerability may lead to unauthorized code execution, posing a significant security risk to the host operating system.
Recommendation
It is recommended to update VMware Workstation to version 12.5.4 or later and VMware Fusion to version 8.5.5 or later to mitigate this vulnerability.
Original NVD description (English source)
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability. This may allow a guest to execute code on the operating system that runs Workstation or Fusion.