CVE-2017-4900

Description

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Affected products

• VMware / Workstation Pro / Player12.x prior to version 12.5.3 – 12.x prior to version 12.5.3

References

• MISChttp://www.securityfocus.com/bid/96770
• VENDOR_ADVISORYhttp://www.vmware.com/security/advisories/VMSA-2017-0003.html
• MISChttp://www.securitytracker.com/id/1037979