CVEs-PoC/2017/CVE-2017-4905.md

### [CVE-2017-4905](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-4905)
![](https://img.shields.io/static/v1?label=Product&message=ESXi&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Fusion%20Pro%20%2F%20Fusion&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Workstation%20Pro%20%2F%20Player&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=12.x%20prior%20to%2012.5.5%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=5.5%20without%20patch%20ESXi550-201703401-SG%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.0%20U1%20without%20patch%20ESXi600-201703402-SG%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.0%20U2%20without%20patch%20ESXi600-201703403-SG%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.0%20U3%20without%20patch%20ESXi600-201703401-SG%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.5%20without%20patch%20ESXi650-201703410-SG%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=8.x%20prior%20to%208.5.6%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Information%20leak&color=brightgreen)

### Description

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/0x726574736F706D69/exploits
- https://github.com/ARPSyndicate/cvemon
- https://github.com/ernestang98/exploits
- https://github.com/ernestang98/win-exploits