CVE-2017-4934

Description

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.05

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.0.0Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.0.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.0.2Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.1.0Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.1.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.0Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.2Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.3Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.4Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.5Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.6Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.7Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.8Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234