Download VMware Workstation Player 12.5.5 build 5234757

VMware has released version 12.5.5 of Workstation Player. Player is free software to create and run virtual machines. However, a fee is charged for commercial use. Simply put, it is a simplified implementation of other VMware products, such as Workstation Pro, Server, and ESX Server. Microsoft Virtual PC virtual machines and Symantec LiveState Recovery disks are also supported. In addition, several pre-installed virtual machines can be installed via this page are downloaded, such as Debian, Ubuntu, and Fedora. In this release, those security vulnerabilities have been fixed and a bug in the VMware Tools.

This release of VMware Workstation Player addresses the following issues:

• VMware Workstation Player has a heap buffer overflow and uninitialized stack memory usage in SVGA. These issues might allow a guest virtual machine to execute code on the host.
  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifiers CVE-2017-4902 (heap issue) and CVE-2017-4903 (stack issue) to these issues.
• The VMware Workstation Player XHCI driver has uninitialized memory usage. This issue might allow a guest virtual machine to execute code on the host.
  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2017-4904 to this issue.
• VMware Workstation Player has uninitialized memory usage. This issue might lead to an information leak.
  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2017-4905 to this issue.

Resolved Issues

• After you install VMware Tools on a 64-bit Windows virtual machine, when the virtual machine boots up, the system might display the following error:
  VMware Tools unrecoverable error: (vthread-4)
  Exception 0xc0000005 (access violation) has occurred.
  This issue has been resolved.