CVE-2017-4900

Published: Jun 7, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Affected (12)

Products: Vmware: Workstation Player, Workstation Pro

Vmware

2 products

Workstation Player

Workstation Pro

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Vmware Workstation Player	Version 12.0.0
Vmware Workstation Player	Version 12.0.1
Vmware Workstation Player	Version 12.1.0
Vmware Workstation Player	Version 12.5.0
Vmware Workstation Player	Version 12.5.1
Vmware Workstation Player	Version 12.5.2
Vmware Workstation Pro	Version 12.0.0
Vmware Workstation Pro	Version 12.0.1
Vmware Workstation Pro	Version 12.1.0
Vmware Workstation Pro	Version 12.5.0
Vmware Workstation Pro	Version 12.5.1
Vmware Workstation Pro	Version 12.5.2