CVE-2017-4915

High

Published: 22/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine.

Risk Assessment

The organization may be exposed to unauthorized access to the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update VMware Workstation Pro/Player to the latest version to mitigate this vulnerability and review the configuration of ALSA sound drivers.

Other vulnerabilities in VMware Workstation Pro/Player

CVE-2017-4898High
VMware Workstation Pro/Player 12.x before version 12.5.3 contains a DLL loading vulnerability due to the 'vmware-vmx' process loading DLLs from a path defined in the local environment variable. Successful exploitation of this issue may allow normal users to escalate privileges to System on the host machine where VMware Workstation is installed.

Original NVD description (English source)