CVE-2017-4945

Published: Jan 5, 2018Modified: Nov 21, 2024

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstation 14.1.0 and Fusion 10.1.0 by default.

Affected (36)

Products: Vmware: Workstation, Fusion

Vmware

2 products

Workstation

Fusion

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Vmware Workstation	Version 12.0.0
Vmware Workstation	Version 12.0.1
Vmware Workstation	Version 12.1.1
Vmware Workstation	Version 12.1
Vmware Workstation	Version 12.5.0
Vmware Workstation	Version 12.5.1
Vmware Workstation	Version 12.5.2
Vmware Workstation	Version 12.5.3
Vmware Workstation	Version 12.5.4
Vmware Workstation	Version 12.5.5
Vmware Workstation	Version 12.5.6
Vmware Workstation	Version 12.5.7
Vmware Workstation	Version 12.5.8
Vmware Workstation	Version 12.5.9
Vmware Workstation	Version 12.5
Vmware Workstation	Version 14.0

Configuration B

20 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vmware Fusion	Version 10.0.1
Vmware Fusion	Version 10.0
Vmware Fusion	Version 10.1.0
Vmware Fusion	Version 10.1.1
Vmware Fusion	Version 8.0.1
Vmware Fusion	Version 8.0.2
Vmware Fusion	Version 8.0
Vmware Fusion	Version 8.1.1
Vmware Fusion	Version 8.1
Vmware Fusion	Version 8.5.10
Vmware Fusion	Version 8.5.1
Vmware Fusion	Version 8.5.2
Vmware Fusion	Version 8.5.3
Vmware Fusion	Version 8.5.4
Vmware Fusion	Version 8.5.5
Vmware Fusion	Version 8.5.6
Vmware Fusion	Version 8.5.7
Vmware Fusion	Version 8.5.8
Vmware Fusion	Version 8.5.9
Vmware Fusion	Version 8.5