Description
VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstation 14.1.0 and Fusion 10.1.0 by default.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | Workstation | 14.x, 12.x | — |
| VMware | Fusion | 10.x, 8.x | — |
References
- 1040109 vdb-entry
- https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html
- 102441 vdb-entry
- 1040136 vdb-entry