CVE-2017-4939

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-17 · updated 2026-06-17
Weakness: CWE-426

Description

VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code.

Affected products

VMware Workstation: 12.0.0, 12.0.1, 12.1.1, 12.5.0, 12.5.1, 12.5.2 (+5)
VMware Workstation: 12.x before 12.5.8

References

http://www.securityfocus.com/bid/101890
https://www.vmware.com/security/advisories/VMSA-2017-0018.html
http://www.securityfocus.com/bid/101890
https://www.vmware.com/security/advisories/VMSA-2017-0018.html

Get alerted when CVE-2017-4939 or the next vulnerability affects your stack