CVE-2017-4939

Published: Nov 17, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code.

Affected (11)

Products: Vmware: Workstation

Vmware

1 product

Workstation

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Vmware Workstation	Version 12.0.0
Vmware Workstation	Version 12.0.1
Vmware Workstation	Version 12.1.1
Vmware Workstation	Version 12.5.0
Vmware Workstation	Version 12.5.1
Vmware Workstation	Version 12.5.2
Vmware Workstation	Version 12.5.3
Vmware Workstation	Version 12.5.4
Vmware Workstation	Version 12.5.5
Vmware Workstation	Version 12.5.6
Vmware Workstation	Version 12.5.7