CVE-2021-21997

Name of the Vulnerable Software and Affected Versions VMware Tools for Windows versions 11.x.y prior to 11.3.0

Description The issue is related to a denial-of-service vulnerability in the VM3DMP driver of VMware Tools for Windows. This vulnerability can be triggered by a malicious actor with local user privileges in the Windows guest operating system, leading to a denial-of-service condition. The vulnerability exists due to insufficient input validation in the VM3DMP driver, allowing an attacker to cause a denial-of-service.

Recommendations For versions 11.x.y prior to 11.3.0, update to version 11.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the VM3DMP driver to minimize the risk of exploitation.