GCVE - cpe:2.3:a:vmware:workstation_pro/player:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:workstation_pro/player:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Workstation Pro/Player (`36761929-9f52-59bf-982f-3d4cf67fa5a3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-4916`	vulnerable	2026-06-08 05:09:38.450032	Details available VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine. Published: 2017-05-22T14:00:00.000Z Updated: 2024-08-05T14:47:42.914Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038526 https://www.vmware.com/security/advisories/VMSA-2017-0009.html http://www.securityfocus.com/bid/98560 https://www.exploit-db.com/exploits/42140/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4915`	vulnerable	2026-06-08 05:09:38.448304	Details available VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine. Published: 2017-05-22T14:00:00.000Z Updated: 2024-08-05T14:47:42.913Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/98566 https://www.vmware.com/security/advisories/VMSA-2017-0009.html http://www.securitytracker.com/id/1038525 https://www.exploit-db.com/exploits/42045/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4901`	vulnerable	2026-06-08 05:09:38.300888	Details available The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability. This may allow a guest to execute code on the operating system that runs Workstation or Fusion. Published: 2017-06-08T13:00:00.000Z Updated: 2024-08-05T14:39:41.308Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2017-0005.html http://www.securitytracker.com/id/1038025 http://www.securityfocus.com/bid/96881	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4900`	vulnerable	2026-06-08 05:09:38.300300	Details available VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs. Published: 2017-06-07T18:00:00.000Z Updated: 2024-08-05T14:39:41.486Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96770 http://www.vmware.com/security/advisories/VMSA-2017-0003.html http://www.securitytracker.com/id/1037979	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4899`	vulnerable	2026-06-08 05:09:38.299739	Details available VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers are installed. Published: 2017-06-07T18:00:00.000Z Updated: 2024-08-05T14:39:41.392Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96771 http://www.vmware.com/security/advisories/VMSA-2017-0003.html http://www.securitytracker.com/id/1037979	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4898`	vulnerable	2026-06-08 05:09:38.292609	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.