Medium severity5.5NVD Advisory· Published Jan 5, 2018· Updated Jun 17, 2026
CVE-2017-4945
CVE-2017-4945
Description
VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstation 14.1.0 and Fusion 10.1.0 by default.
Affected products
38cpe:2.3:a:vmware:fusion:10.0.1:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:vmware:fusion:10.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:10.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:10.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.10:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5.9:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:8.5:*:*:*:*:*:*:*
- (no CPE)range: 10.x
cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5.9:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workstation:14.0:*:*:*:*:*:*:*
- (no CPE)range: 14.x
Patches
Vulnerability mechanics
References
4- www.vmware.com/us/security/advisories/VMSA-2018-0003.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/102441nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040109nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040136nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.