deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-9960
Published: 2017-06-06
Description: game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html; http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html; http://www.openwall.com/lists/oss-security/2016/12/15/11
CVE: CVE-2016-9961
Published: 2017-06-06
Description: game-music-emu before 0.6.1 mishandles unspecified integer values.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html; http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html; http://www.openwall.com/lists/oss-security/2016/12/15/11
CVE: CVE-2017-9461
Published: 2017-06-06
Description: smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/99455; https://access.redhat.com/errata/RHSA-2017:1950; https://access.redhat.com/errata/RHSA-2017:2338
CVE: CVE-2017-9462
Published: 2017-06-06
Description: In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://www.debian.org/security/2017/dsa-3963; http://www.securityfocus.com/bid/99123; https://access.redhat.com/errata/RHSA-2017:1576
CVE: CVE-2017-9465
Published: 2017-06-06
Description: The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file that is mishandled in the yr_re_fast_exec function in libyara/re.c and the _yr_scan_match_callback function in libyara/scan.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/VirusTotal/yara/commit/992480c30f75943e9cd6245bb2015c7737f9b661; https://github.com/VirusTotal/yara/issues/678; https://github.com/VirusTotal/yara/commit/992480c30f75943e9cd6245bb2015c7737f9b661
CVE: CVE-2017-9468
Published: 2017-06-07
Description: In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://openwall.com/lists/oss-security/2017/06/06/4; http://www.debian.org/security/2017/dsa-3885; http://www.securityfocus.com/bid/99015
CVE: CVE-2017-9469
Published: 2017-06-07
Description: In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2017/06/06/4; http://www.debian.org/security/2017/dsa-3885; http://www.securityfocus.com/bid/99043
CVE: CVE-2017-9470
Published: 2017-06-07
Description: In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://blogs.gentoo.org/ago/2017/05/24/ytnef-null-pointer-dereference-in-mapiprint-ytnef-c/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/; https://blogs.gentoo.org/ago/2017/05/24/ytnef-null-pointer-dereference-in-mapiprint-ytnef-c/
CVE: CVE-2017-9471
Published: 2017-06-07
Description: In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapword-ytnef-c/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/; https://usn.ubuntu.com/3667-1/
CVE: CVE-2017-9472
Published: 2017-06-07
Description: In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapdword-ytnef-c/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/; https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapdword-ytnef-c/
CVE: CVE-2017-9473
Published: 2017-06-07
Description: In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
References: https://blogs.gentoo.org/ago/2017/05/24/ytnef-memory-allocation-failure-in-tneffillmapi-ytnef-c/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/; https://usn.ubuntu.com/3667-1/
CVE: CVE-2017-9474
Published: 2017-06-07
Description: In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-decompressrtf-ytnef-c/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/; https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-decompressrtf-ytnef-c/
CVE: CVE-2016-9834
Published: 2017-06-07
Description: An XSS vulnerability allows remote attackers to execute arbitrary client side script on vulnerable installations of Sophos Cyberoam firewall devices with firmware through 10.6.4. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of a request to the "LiveConnectionDetail.jsp" application. GET parameters "applicationname" and "username" are improperly sanitized allowing an attacker to inject arbitrary JavaScript into the page. This can be abused by an attacker to perform a cross-site scripting attack on the user. A vulnerable URI is /corporate/webpages/trafficdiscovery/LiveConnectionDetail.jsp.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/bugtraq/2017/Jun/4; http://seclists.org/bugtraq/2017/Jun/4
CVE: CVE-2017-7312
Published: 2017-06-07
Description: An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add a vendor account or read existing vendor account data (including usernames and passwords).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://amswoes.wordpress.com/2017/06/06/first-blog-post/; https://amswoes.wordpress.com/2017/06/06/first-blog-post/
CVE: CVE-2017-7313
Published: 2017-06-07
Description: An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, it is possible to read any customer name, master Customer Id, and email address. In other words, anyone can search for users/customers in the system - no authentication is required.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://amswoes.wordpress.com/2017/06/06/cve-2017-7313-how-to-dump-personify-customer-data-with-one-click-23/; https://amswoes.wordpress.com/2017/06/06/cve-2017-7313-how-to-dump-personify-customer-data-with-one-click-23/
CVE: CVE-2017-7314
Published: 2017-06-07
Description: An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, while creating a new role, a list of database tables and their columns is available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://amswoes.wordpress.com/2017/06/06/cve-2017-7314-dump-personify-database-schema-33/; https://amswoes.wordpress.com/2017/06/06/cve-2017-7314-dump-personify-database-schema-33/
CVE: CVE-2015-7326
Published: 2017-06-07
Description: XML External Entity (XXE) vulnerability in Milton Webdav before 2.7.0.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://packetstormsecurity.com/files/134178/Milton-Webdav-2.7.0.1-XXE-Injection.html; http://www.securityfocus.com/archive/1/536813/100/0/threaded; http://www.securityfocus.com/bid/77392
CVE: CVE-2015-7514
Published: 2017-06-07
Description: OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2015/12/03/4; https://bugzilla.redhat.com/show_bug.cgi?id=1285809; https://review.openstack.org/#/c/252993
CVE: CVE-2015-7723
Published: 2017-06-07
Description: AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://packetstormsecurity.com/files/134121/AMD-fglrx-driver-14.4.2-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2015/Oct/104; http://www.securityfocus.com/archive/1/536783/100/0/threaded
CVE: CVE-2015-7724
Published: 2017-06-07
Description: AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2015-7723.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://packetstormsecurity.com/files/134120/AMD-fglrx-driver-15.7-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2015/Oct/103; http://www.securityfocus.com/archive/1/536782/100/0/threaded
CVE: CVE-2015-7888
Published: 2017-06-07
Description: Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in the name of a file, compressed into a zipped file named cred.zip, and downloaded to /sdcard/Download.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html; http://www.securityfocus.com/bid/77338; https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1
CVE: CVE-2015-8326
Published: 2017-06-07
Description: The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2015/11/24/10; https://bugzilla.redhat.com/show_bug.cgi?id=1267962; https://github.com/mtrmac/IPTables-Parse/commit/b400b976d81140f6971132e94eb7657b5b0a2b87
CVE: CVE-2017-9499
Published: 2017-06-07
Description: In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://www.securityfocus.com/bid/98944; https://github.com/ImageMagick/ImageMagick/commit/7fd419441bc7103398e313558171d342c6315f44; https://github.com/ImageMagick/ImageMagick/issues/492
CVE: CVE-2017-9500
Published: 2017-06-07
Description: In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://www.securityfocus.com/bid/98941; https://github.com/ImageMagick/ImageMagick/issues/500; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE: CVE-2017-9501
Published: 2017-06-07
Description: In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://www.securityfocus.com/bid/98943; https://github.com/ImageMagick/ImageMagick/commit/01843366d6a7b96e22ad7bb67f3df7d9fd4d5d74; https://github.com/ImageMagick/ImageMagick/issues/491
CVE: CVE-2017-7563
Published: 2017-06-07
Description: In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs because of inconsistency in the number of execute-never bits (one bit versus two bits).
CVSS Score: 8.1 (HIGH)
CWE: CWE-732
References: https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-3; https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-3
CVE: CVE-2017-7564
Published: 2017-06-07
Description: In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to cause a denial of service (secure world panic) via vectors involving debug exceptions and debug registers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-2; https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-2
CVE: CVE-2016-0254
Published: 2017-06-07
Description: IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service. IBM X-Force ID: 110563.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22004036; http://www.securityfocus.com/bid/98971; https://exchange.xforce.ibmcloud.com/vulnerabilities/110563
CVE: CVE-2016-3019
Published: 2017-06-07
Description: IBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 114462.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=swg21988419; http://www.securityfocus.com/bid/98832; http://www.securitytracker.com/id/1038616
CVE: CVE-2016-3051
Published: 2017-06-07
Description: IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access some privileged functionality of the server. IBM X-Force ID: 114714.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.ibm.com/support/docview.wss?uid=swg21995724; http://www.securityfocus.com/bid/98912; http://www.securitytracker.com/id/1038615
CVE: CVE-2016-5959
Published: 2017-06-07
Description: IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 116136.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22003092; http://www.securityfocus.com/bid/98829; https://exchange.xforce.ibmcloud.com/vulnerabilities/116136
CVE: CVE-2016-5960
Published: 2017-06-07
Description: IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 116171.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22003092; http://www.securityfocus.com/bid/98825; https://exchange.xforce.ibmcloud.com/vulnerabilities/116171
CVE: CVE-2016-6087
Published: 2017-06-07
Description: IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange validation. IBM X-Force ID: 117918.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22002808; http://www.securityfocus.com/bid/98794; http://www.securitytracker.com/id/1038606
CVE: CVE-2016-6089
Published: 2017-06-07
Description: IBM WebSphere MQ 9.0.0.1 and 9.0.2 could allow a local user to write to a file or delete files in a directory they should not have access to due to improper access controls. IBM X-Force ID: 117926.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.ibm.com/support/docview.wss?uid=swg22003509; http://www.securityfocus.com/bid/98770; https://exchange.xforce.ibmcloud.com/vulnerabilities/117926
CVE: CVE-2016-8939
Published: 2017-06-07
Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22003738; http://www.securityfocus.com/bid/98783; http://www.securitytracker.com/id/1038607
CVE: CVE-2016-9710
Published: 2017-06-07
Description: IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22004036; http://www.securityfocus.com/bid/98975; https://exchange.xforce.ibmcloud.com/vulnerabilities/119618
CVE: CVE-2016-9977
Published: 2017-06-07
Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 120253.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22003981; http://www.securityfocus.com/bid/98786; https://exchange.xforce.ibmcloud.com/vulnerabilities/120253
CVE: CVE-2017-1125
Published: 2017-06-07
Description: IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22004036; http://www.securityfocus.com/bid/98945; https://exchange.xforce.ibmcloud.com/vulnerabilities/121340
CVE: CVE-2017-1178
Published: 2017-06-07
Description: IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123430.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22004164; http://www.securityfocus.com/bid/98909; https://exchange.xforce.ibmcloud.com/vulnerabilities/123430
CVE: CVE-2017-1196
Published: 2017-06-07
Description: IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: http://www.ibm.com/support/docview.wss?uid=swg22004168; http://www.securityfocus.com/bid/98911; https://exchange.xforce.ibmcloud.com/vulnerabilities/123671
CVE: CVE-2017-1305
Published: 2017-06-07
Description: IBM DOORS Next Generation (DNG/RRC) 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125459.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22002799; http://www.securityfocus.com/bid/98834; https://exchange.xforce.ibmcloud.com/vulnerabilities/125459
CVE: CVE-2017-4914
Published: 2017-06-07
Description: VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/98939; http://www.securitytracker.com/id/1038617; http://www.vmware.com/security/advisories/VMSA-2017-0010.html
CVE: CVE-2017-4917
Published: 2017-06-07
Description: VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327
References: http://www.securityfocus.com/bid/98936; http://www.securitytracker.com/id/1038617; http://www.vmware.com/security/advisories/VMSA-2017-0010.html
CVE: CVE-2017-4898
Published: 2017-06-07
Description: VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/96772; http://www.securitytracker.com/id/1037979; http://www.vmware.com/security/advisories/VMSA-2017-0003.html
CVE: CVE-2017-4899
Published: 2017-06-07
Description: VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers are installed.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/96771; http://www.securitytracker.com/id/1037979; http://www.vmware.com/security/advisories/VMSA-2017-0003.html
CVE: CVE-2017-4900
Published: 2017-06-07
Description: VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/96770; http://www.securitytracker.com/id/1037979; http://www.vmware.com/security/advisories/VMSA-2017-0003.html
CVE: CVE-2017-4902
Published: 2017-06-07
Description: VMware ESXi 6.5 without patch ESXi[PII_REDACTED]10-SG and 5.5 without patch ESXi[PII_REDACTED]01-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97163; http://www.securitytracker.com/id/1038148; http://www.securitytracker.com/id/1038149
CVE: CVE-2017-4903
Published: 2017-06-07
Description: VMware ESXi 6.5 without patch ESXi[PII_REDACTED]10-SG, 6.0 U3 without patch ESXi[PII_REDACTED]01-SG, 6.0 U2 without patch ESXi[PII_REDACTED]03-SG, 6.0 U1 without patch ESXi[PII_REDACTED]02-SG, and 5.5 without patch ESXi[PII_REDACTED]01-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have an uninitialized stack memory usage in SVGA. This issue may allow a guest to execute code on the host.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97160; http://www.securitytracker.com/id/1038148; http://www.securitytracker.com/id/1038149