Test Kennung:	1.3.6.1.4.1.25623.1.0.107210
Kategorie:	Privilege escalation
Titel:	Multiple VMware Workstation Products DLL Loading Local Privilege Escalation Vulnerability - Linux
Zusammenfassung:	VMware Workstation and Horizon View Client are prone to a remote; code execution (RCE) vulnerability (Windows).
Beschreibung:	Summary: VMware Workstation and Horizon View Client are prone to a remote code execution (RCE) vulnerability (Windows). Vulnerability Insight: VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine. Vulnerability Impact: Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. Affected Software/OS: 12.5.6 Solution: Update to VMWare Workstation Player 12.5.6. Please see the references or vendor advisory for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-4915 BugTraq ID: 98566 http://www.securityfocus.com/bid/98566 https://www.exploit-db.com/exploits/42045/ http://www.securitytracker.com/id/1038525 Common Vulnerability Exposure (CVE) ID: CVE-2017-4916 BugTraq ID: 98560 http://www.securityfocus.com/bid/98560 https://www.exploit-db.com/exploits/42140/ http://www.securitytracker.com/id/1038526
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.