Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-4949

VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a guest to execute code on the host. Note

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a guest to execute code on the host. Note: IPv6 mode for VMNAT is not enabled by default.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware Workstation Pro / Player

  • 14.x before 14.1.1affected
  • 12.x before 12.5.9affected

VMware Fusion

  • 10.x before 10.1.1affected
  • 8.x before 8.5.10affected

References