CVE-2017-4915

This exploit leverages VMWare Workstation's loading of libasound in a setuid context, allowing an unprivileged user to gain root privileges by injecting a malicious shared library via ~/.asoundrc. The library executes a constructor function that escalates privileges when loaded by the vmware-vmx process.

This exploit leverages a local privilege escalation vulnerability in VMware Workstation/Player by abusing the sound subsystem to load a malicious shared library, granting root access. It creates a crafted VM configuration and uses the `.asoundrc` file to trigger the payload.

This Metasploit module exploits CVE-2017-4915, a local privilege escalation vulnerability in VMware Workstation Pro and Player on Linux. It leverages an ALSA configuration file to load and execute a malicious shared object as root when a virtual machine with an attached sound card is launched.