GCVE - cpe:2.3:a:vmware:workstation_pro:12.5.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:workstation_pro:12.5.0:*:*:*:*:*:*:*

part: a version: 12.5.0 update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Workstation Pro (`0a57f574-4cd9-5fa5-8535-8869ef0331d3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-4900`	vulnerable	2026-06-08 05:09:38.300482	Details available VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs. Published: 2017-06-07T18:00:00.000Z Updated: 2024-08-05T14:39:41.486Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96770 http://www.vmware.com/security/advisories/VMSA-2017-0003.html http://www.securitytracker.com/id/1037979	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4899`	vulnerable	2026-06-08 05:09:38.299928	Details available VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers are installed. Published: 2017-06-07T18:00:00.000Z Updated: 2024-08-05T14:39:41.392Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96771 http://www.vmware.com/security/advisories/VMSA-2017-0003.html http://www.securitytracker.com/id/1037979	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4898`	vulnerable	2026-06-08 05:09:38.298122	Details available VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed. Published: 2017-06-07T18:00:00.000Z Updated: 2024-08-05T14:39:41.379Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2017-0003.html http://www.securityfocus.com/bid/96772 http://www.securitytracker.com/id/1037979	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-7461`	vulnerable	2026-06-08 05:08:12.714811	Details available The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (out-of-bounds memory access on the host OS) via unspecified vectors. Published: 2016-12-29T09:02:00.000Z Updated: 2024-08-06T01:57:47.638Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94280 http://www.vmware.com/security/advisories/VMSA-2016-0019.html http://www.securitytracker.com/id/1037282	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.