Talos Vulnerability Report

TALOS-2019-0757

VMware Workstation 15 pixel shader functionality denial of service vulnerability

August 5, 2019

CVE Number

CVE‑2019‑5521

Summary

An exploitable denial-of-service vulnerability exists in VMware Workstation 15. A specially crafted pixel shader can cause denial-of-service issues. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host, leading to vmware-vmx.exe process crash on host.

Tested Versions

VMware Workstation 15 (15.0.2 build-10952284) with Windows 10 x64 as guestVM

Product URLs

http://vmware.com

CVSSv3 Score

6.5 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE

CWE-125: Out-of-bounds Read

Details

This vulnerability can be triggered by supplying a malformed pixel shader (inside VMware guest OS). An attacker could trigger this from VMware guest usermode to cause a denial-of-service attack (through an out-of-bounds read, which could potentially also result in an information leak) on vmware-vmx.exe process on host or, theoretically, through WEBGL (remote website).

Example of malformed pixel shader:

(vmware debug mode): 2018-12-26T09:31:59.472+01:00| svga| W115: — input — 2018-12-26T09:31:59.472+01:00| svga| W115+ ps_4_0 2018-12-26T09:31:59.472+01:00| svga| W115+ DCL_SAMPLER SAMPLER[0], DEFAULT 2018-12-26T09:31:59.472+01:00| svga| W115+ DCL_RESOURCE RESOURCE[0], TEXTURE2D, {FLOAT, FLOAT, FLOAT, FLOAT} 2018-12-26T09:31:59.472+01:00| svga| W115+ DCL_INPUT_PS INPUT[1].xy, LINEAR 2018-12-26T09:31:59.472+01:00| svga| W115+ DCL_OUTPUT OUTPUT[0].xyzw 2018-12-26T09:31:59.472+01:00| svga| W115+ DCL_TEMPS 1 2018-12-26T09:31:59.472+01:00| svga| W115+ SAMPLE TEMP[0].xyzw, INPUT[1].xyxx, RESOURCE[26112].xyzw, SAMPLER[0] 2018-12-26T09:31:59.472+01:00| svga| W115+ MOV OUTPUT[0].xyzw, TEMP[0].xyzw 2018-12-26T09:31:59.472+01:00| svga| W115+ RET 2018-12-26T09:31:59.472+01:00| svga| W115+ 2018-12-26T09:31:59.472+01:00| svga| E105: PANIC: ASSERT bora\mks\hostops\DX11\DX11ShaderTrans.c:3267 2018-12-26T09:31:59.472+01:00| svga| W115: Win32 object usage: GDI 7, USER 24 2018-12-26T09:31:59.472+01:00| svga| I125: CoreDump_CoreDump: faking exception to get context 2018-12-26T09:31:59.473+01:00| svga| I125: CoreDump: Minidump file vmware-vmx-debug.dmp exists. Rotating …

By modifying the shader instruction (shader bytecode), for example from “SAMPLE TEMP[0].xyzw, INPUT[1].xyxx, RESOURCE[0].xyzw, SAMPLER[0]” to “SAMPLE TEMP[0].xyzw, INPUT[1].xyxx, RESOURCE[26112].xyzw, SAMPLER[0]”, it is possible to cause a denial-of-service of vmware-vmx.exe process.

As you can see in shader instructions dump, the shader was modified and the array index of “RESOURCE” was changed to 26112. This causes the vulnerability because, in the resource declaration, only RESOURCE[0] was declared. Therefore, RESOURCE[26112] is simply invalid. This causes read access violation as presented below. Additionally by changing the the index value of this array attacker can compute different read addresses and cause an out-of-bounds read.

(vmware release mode crash dump fragment):

0:012> .ecxr
rax=00000001fffff000 rbx=00007ff7eb952420 rcx=5de0fa8b8cd20000
rdx=0000000000000000 rsi=000000000ebe67e8 rdi=000000000f75ab20
rip=00007ff7eb95263d rsp=000000000ebe47f0 rbp=000000000ebe48f0
 r8=0000000000000000  r9=0000000000000000 r10=00000000fffff800
r11=000000000ebe3710 r12=0000000000000000 r13=000000000ebe6910
r14=0000000000000000 r15=000000000ebe64a0
iopl=0         nv up ei pl nz na po nc
cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206
Unable to load image C:\Program Files (x86)\VMware\VMware Workstation\x64\vmware-vmx.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vmware-vmx.exe
*** ERROR: Module load completed but symbols could not be loaded for vmware-vmx.exe
vmware_vmx+0x35263d:
00007ff7`eb95263d 4c8b1cc7        mov     r11,qword ptr [rdi+rax*8] ds:00000010`0f752b20=????????????????

Crash Information

From vmware-vmx.exe (this is not a windbg crash dump):

2018-12-26T09:45:56.496+01:00| svga| W115: ----Win32 exception detected, exceptionCode 0xc0000005 (access violation)----
2018-12-26T09:45:56.496+01:00| svga| W115: ExceptionAddress 0x7ff7eb95263d eflags 0x00010206
2018-12-26T09:45:56.496+01:00| svga| W115: rwFlags 0 badAddr 0x100f752b20
2018-12-26T09:45:56.496+01:00| svga| W115: rax 0x1fffff000 rbx 0x7ff7eb952420 rcx 0x5de0fa8b8cd20000
2018-12-26T09:45:56.496+01:00| svga| W115: rdx 0x1fffff000 rsi 0xebe67e8 rdi 0xf75ab20
2018-12-26T09:45:56.496+01:00| svga| W115: r8 0 r9 0 r10 0xfffff800
2018-12-26T09:45:56.496+01:00| svga| W115: r11 0xebe3710 r12 0 r13 0xebe6910
2018-12-26T09:45:56.496+01:00| svga| W115: r14 0 r15 0xebe64a0
2018-12-26T09:45:56.496+01:00| svga| W115: rip 0x7ff7eb95263d rsp 0xebe47f0 rbp 0xebe48f0
2018-12-26T09:45:56.496+01:00| svga| W115: LastBranchToRip 0 LastBranchFromRip 0
2018-12-26T09:45:56.496+01:00| svga| W115: LastExceptionToRip 0 LastExceptionFromRip 0
2018-12-26T09:45:56.496+01:00| svga| W115: The following data was delivered with the exception:
2018-12-26T09:45:56.496+01:00| svga| W115:  -- 0
2018-12-26T09:45:56.496+01:00| svga| W115:  -- 0x100f752b20
2018-12-26T09:45:56.497+01:00| svga| I125: CoreDump: Minidump file J:\my_dir\Nowy folder\vmware-vmx.dmp exists. Rotating ...
2018-12-26T09:45:56.634+01:00| svga| W115: CoreDump: Writing minidump to J:\my_dir\Nowy folder\vmware-vmx.dmp
2018-12-26T09:45:56.789+01:00| svga| I125: CoreDump: including module base 0x0x7ff7eb600000 size 0x0x0124d000
2018-12-26T09:45:56.789+01:00| svga| I125:   checksum 0x00f5b2da timestamp 0x5bf5251a
2018-12-26T09:45:56.789+01:00| svga| I125:   image file C:\Program Files (x86)\VMware\VMware Workstation\x64\vmware-vmx.exe
2018-12-26T09:45:56.789+01:00| svga| I125:   file version 15.0.2.40550
2018-12-26T09:45:56.789+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeff00000 size 0x0x001ed000
2018-12-26T09:45:56.789+01:00| svga| I125:   checksum 0x001f20d1 timestamp 0xe8b54827
2018-12-26T09:45:56.789+01:00| svga| I125:   image file C:\Windows\System32\ntdll.dll
2018-12-26T09:45:56.789+01:00| svga| I125:   file version 10.0.17763.194
2018-12-26T09:45:56.789+01:00| svga| I125: CoreDump: including module base 0x0x7ffeee620000 size 0x0x000b3000
2018-12-26T09:45:56.789+01:00| svga| I125:   checksum 0x000b9393 timestamp 0x65614da1
2018-12-26T09:45:56.789+01:00| svga| I125:   image file C:\Windows\System32\kernel32.dll
2018-12-26T09:45:56.789+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.789+01:00| svga| I125: CoreDump: including module base 0x0x7ffeec780000 size 0x0x00293000
2018-12-26T09:45:56.789+01:00| svga| I125:   checksum 0x002a2815 timestamp 0x1659a33b
2018-12-26T09:45:56.789+01:00| svga| I125:   image file C:\Windows\System32\KERNELBASE.dll
2018-12-26T09:45:56.789+01:00| svga| I125:   file version 10.0.17763.134
2018-12-26T09:45:56.789+01:00| svga| I125: CoreDump: including module base 0x0x7ffeecb90000 size 0x0x000fc000
2018-12-26T09:45:56.789+01:00| svga| I125:   checksum 0x0010222e timestamp 0x309241e0
2018-12-26T09:45:56.789+01:00| svga| I125:   image file C:\Windows\System32\ucrtbase.dll
2018-12-26T09:45:56.789+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.789+01:00| svga| I125: CoreDump: including module base 0x0x7ffeed680000 size 0x0x00197000
2018-12-26T09:45:56.789+01:00| svga| I125:   checksum 0x0019e334 timestamp 0x5960d576
2018-12-26T09:45:56.789+01:00| svga| I125:   image file C:\Windows\System32\user32.dll
2018-12-26T09:45:56.789+01:00| svga| I125:   file version 10.0.17763.168
2018-12-26T09:45:56.789+01:00| svga| I125: CoreDump: including module base 0x0x7ffeecc90000 size 0x0x00020000
2018-12-26T09:45:56.789+01:00| svga| I125:   checksum 0x000230fc timestamp 0xff141dbb
2018-12-26T09:45:56.789+01:00| svga| I125:   image file C:\Windows\System32\win32u.dll
2018-12-26T09:45:56.789+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.789+01:00| svga| I125: CoreDump: including module base 0x0x7ffeed270000 size 0x0x00029000
2018-12-26T09:45:56.789+01:00| svga| I125:   checksum 0x000274e8 timestamp 0xaa866dfc
2018-12-26T09:45:56.789+01:00| svga| I125:   image file C:\Windows\System32\gdi32.dll
2018-12-26T09:45:56.789+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.789+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeccb0000 size 0x0x0019a000
2018-12-26T09:45:56.789+01:00| svga| I125:   checksum 0x001a04b3 timestamp 0x3513b275
2018-12-26T09:45:56.789+01:00| svga| I125:   image file C:\Windows\System32\gdi32full.dll
2018-12-26T09:45:56.789+01:00| svga| I125:   file version 10.0.17763.194
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffedce00000 size 0x0x00016000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0001b2e2 timestamp 0x5b3efc77
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\VCRUNTIME140.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 14.15.26706.0
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeecad0000 size 0x0x000a0000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x000aa062 timestamp 0x64bc25b9
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\msvcp_win.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeefd60000 size 0x0x00155000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x001617b3 timestamp 0x47d4d9b6
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\ole32.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.134
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeed820000 size 0x0x0032d000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x00332a84 timestamp 0x5f712695
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\combase.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.134
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeed540000 size 0x0x00122000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0012b25f timestamp 0x38cc3507
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\rpcrt4.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.194
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeecea0000 size 0x0x0007e000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x000897e0 timestamp 0xe29631ca
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\bcryptPrimitives.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeed2a0000 size 0x0x000a3000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x000a4051 timestamp 0xb12069f9
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\advapi32.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeee750000 size 0x0x0009e000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x000a6576 timestamp 0x05c26c69
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\msvcrt.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 7.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeee400000 size 0x0x0009e000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x000a9176 timestamp 0x7d59184a
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\sechost.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeee870000 size 0x0x014ef000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0151e360 timestamp 0xcaf2f2df
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\shell32.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.168
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeece50000 size 0x0x0004a000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0004f3eb timestamp 0xca7e64ca
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\cfgmgr32.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeee570000 size 0x0x000a8000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x000a6bc1 timestamp 0x9a0e77eb
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\SHCore.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeebfd0000 size 0x0x0074a000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0075dd54 timestamp 0x275f01a7
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\windows.storage.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.168
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeebfa0000 size 0x0x00024000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0002ec08 timestamp 0x36191177
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\profapi.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeebf20000 size 0x0x0005d000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0006167d timestamp 0x8941f3e3
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\powrprof.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeee3a0000 size 0x0x00052000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0005be0c timestamp 0x4392c932
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\shlwapi.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeebf00000 size 0x0x00011000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0001c039 timestamp 0xbe88784d
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\kernel.appcore.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeecb70000 size 0x0x00017000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0001f088 timestamp 0xfe800ac7
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\cryptsp.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeedc20000 size 0x0x00475000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0048004f timestamp 0x8cfdc7f2
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\setupapi.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeed100000 size 0x0x00026000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0002f670 timestamp 0x4d019572
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\bcrypt.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeee6e0000 size 0x0x0006d000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0006d338 timestamp 0x4ee4fbbf
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\ws2_32.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeee4a0000 size 0x0x000cb000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x000d5ce4 timestamp 0xd0922571
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\oleaut32.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeecf20000 size 0x0x001db000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x001de80e timestamp 0xb2fbbe58
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\crypt32.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeebf80000 size 0x0x00012000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0001b8e7 timestamp 0xac91a4b2
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\msasn1.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffeea1d0000 size 0x0x00024000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x00029b8b timestamp 0x01dd0441
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\winmm.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffec1310000 size 0x0x00096000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x0009cb61 timestamp 0xd6d52567
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\dsound.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffee49e0000 size 0x0x00041000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x00040f64 timestamp 0xc2c19daa
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\WinSCard.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x7ffee6e10000 size 0x0x000f1000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x000f51d4 timestamp 0xa550ecc2
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Windows\System32\winhttp.dll
2018-12-26T09:45:56.790+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.790+01:00| svga| I125: CoreDump: including module base 0x0x6fb30000 size 0x0x0001a000
2018-12-26T09:45:56.790+01:00| svga| I125:   checksum 0x00020f59 timestamp 0x5b281fdf
2018-12-26T09:45:56.790+01:00| svga| I125:   image file C:\Program Files (x86)\VMware\VMware Workstation\x64\zlib1.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 1.2.11.0
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffee8b00000 size 0x0x00013000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000141f8 timestamp 0x645d63a8
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\wtsapi32.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeea1a0000 size 0x0x0002d000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000313bc timestamp 0x61c36296
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\WINMMBASE.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeebd10000 size 0x0x00029000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x00035933 timestamp 0x38fddd55
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\devobj.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeed360000 size 0x0x0002e000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000306da timestamp 0x6b207046
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\imm32.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeea530000 size 0x0x0009c000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x00098b0d timestamp 0x4b037c22
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\uxtheme.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeafd0000 size 0x0x00031000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000360d6 timestamp 0x376a9861
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\ntmarta.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x6f8d0000 size 0x0x00255000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x002510d2 timestamp 0x5bb436c9
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Program Files (x86)\VMware\VMware Workstation\x64\libeay32.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 1.0.2.16
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffed9120000 size 0x0x0005f000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000604e7 timestamp 0x5bb436d9
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Program Files (x86)\VMware\VMware Workstation\x64\ssleay32.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 1.0.2.16
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeb2f0000 size 0x0x00033000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x00039b84 timestamp 0xeb037b86
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\rsaenh.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeb900000 size 0x0x0000c000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x0000d582 timestamp 0x210d2d73
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\CRYPTBASE.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeebe00000 size 0x0x0002f000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000339df timestamp 0xebd3b7f6
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\sspicli.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeb730000 size 0x0x00067000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x0006cb14 timestamp 0x714e4053
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\mswsock.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeb4d0000 size 0x0x000c6000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000cc0a9 timestamp 0xa1206fe7
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\dnsapi.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeed670000 size 0x0x00008000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x0000c1ee timestamp 0x7ace72dc
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\nsi.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeb490000 size 0x0x0003d000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x0003b254 timestamp 0x55458551
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\IPHLPAPI.DLL
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffee0780000 size 0x0x0000a000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x0000ec91 timestamp 0x389781ac
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\rasadhlp.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeedb70000 size 0x0x000a2000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000a9f48 timestamp 0xaaba4fa9
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\clbcatq.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 2001.12.10941.16384
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeda5b0000 size 0x0x00011000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x0000bb8c timestamp 0x80ed95b9
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\wbem\wbemprox.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffedc6c0000 size 0x0x00085000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000821c7 timestamp 0x264de62a
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\wbemcomn.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffed97a0000 size 0x0x00014000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x00015c08 timestamp 0x42167f4e
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\wbem\wbemsvc.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffed9ef0000 size 0x0x000f1000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x000f6195 timestamp 0xc27bfeee
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\wbem\fastprox.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeefec0000 size 0x0x00008000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x00009082 timestamp 0x43f78f9f
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\psapi.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffedcb50000 size 0x0x001ed000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x001d72c0 timestamp 0x05f0e9a4
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\dbghelp.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeee0a0000 size 0x0x0016a000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x001780ac timestamp 0x6c634a1d
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\msctf.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffeebcb0000 size 0x0x00058000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x0005f200 timestamp 0xd1e21847
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\winsta.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffebd670000 size 0x0x00066000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x00061b53 timestamp 0x9ff9e1ff
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\SensorsApi.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.168
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffee7fa0000 size 0x0x0001e000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x00021e5c timestamp 0xbbb5f881
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\SensorsUtilsV2.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffece530000 size 0x0x00024000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x00023855 timestamp 0xabdcae8a
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\SensorsNativeApi.V2.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffee8920000 size 0x0x001a8000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x001acb40 timestamp 0x8ccb846c
2018-12-26T09:45:56.791+01:00| svga| I125:   image file C:\Windows\System32\propsys.dll
2018-12-26T09:45:56.791+01:00| svga| I125:   file version 7.0.17763.1
2018-12-26T09:45:56.791+01:00| svga| I125: CoreDump: including module base 0x0x7ffec2ed0000 size 0x0x00030000
2018-12-26T09:45:56.791+01:00| svga| I125:   checksum 0x00032b59 timestamp 0x91d63955
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\PortableDeviceTypes.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffecd900000 size 0x0x00036000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x0003e09f timestamp 0x2c0d51d2
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\deviceaccess.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeec720000 size 0x0x00058000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x00063cc0 timestamp 0xefa740e2
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\wintrust.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeea860000 size 0x0x0002e000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x000380b6 timestamp 0xb90c6519
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\dwmapi.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffee3d60000 size 0x0x0000a000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x000100e7 timestamp 0xb11b88e5
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\version.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeedb50000 size 0x0x0001d000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x000270f8 timestamp 0x00e30045
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\imagehlp.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffe9c8b0000 size 0x0x00266000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x0026a6a7 timestamp 0x5aa7d03d
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\nvspcap64.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 3.13.1.30
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeda8c0000 size 0x0x00045000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x000440d7 timestamp 0xeb7bdbd0
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\bthprops.cpl
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeda330000 size 0x0x00279000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x0027c149 timestamp 0x5ee39c26
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.194_none_05b3366207211c42\comctl32.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 6.10.17763.194
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffed97c0000 size 0x0x000ad000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x000a8b32 timestamp 0x700dafec
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\mscms.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeebe30000 size 0x0x00028000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x0002961f timestamp 0xbbcbf3a2
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\userenv.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeda670000 size 0x0x00010000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x0000eeb8 timestamp 0xb5672678
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\ColorAdapterClient.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffebd610000 size 0x0x00043000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x0004a1f9 timestamp 0xa5d2ba3f
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\icm32.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffee9070000 size 0x0x0027e000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x0028c849 timestamp 0x13a31007
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\d3d11.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeac90000 size 0x0x000c2000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x000c506d timestamp 0x6b3e2414
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\dxgi.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffed4bf0000 size 0x0x000eb000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x000e9f9c timestamp 0x5aab7399
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\DriverStore\FileRepository\nvlt.inf_amd64_a6bf104b7144aa93\nvldumdx.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 23.21.13.9125
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffe8e480000 size 0x0x01bfd000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x01bf7f90 timestamp 0x5aab7e67
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\DriverStore\FileRepository\nvlt.inf_amd64_a6bf104b7144aa93\nvwgf2umx.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 23.21.13.9125
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffee1020000 size 0x0x0174a000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x017d34d1 timestamp 0x59e6a97c
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\DriverStore\FileRepository\ki125133.inf_amd64_7a52044300619fc7\igd10iumd64.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 22.20.16.4836
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeb9f0000 size 0x0x00026000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x00027614 timestamp 0xb8fe18e6
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\ncrypt.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffeeb9b0000 size 0x0x0003c000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x0004318b timestamp 0x6f58dff3
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\ntasn1.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffede290000 size 0x0x0160c000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x01681f3f timestamp 0x59e6aab7
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\DriverStore\FileRepository\ki125133.inf_amd64_7a52044300619fc7\igc64.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 22.20.16.4836
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: including module base 0x0x7ffedc460000 size 0x0x0002a000
2018-12-26T09:45:56.792+01:00| svga| I125:   checksum 0x0003488c timestamp 0x590c013e
2018-12-26T09:45:56.792+01:00| svga| I125:   image file C:\Windows\System32\dbgcore.dll
2018-12-26T09:45:56.792+01:00| svga| I125:   file version 10.0.17763.1
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 18872
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 17632
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 18560
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 12068
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 14420
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 17212
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 13708
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 10232
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 18184
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 19228
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 11060
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 13936
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 10820
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 5160
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 17224
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 16476
2018-12-26T09:45:56.792+01:00| svga| I125: CoreDump: Including thread 3860
2018-12-26T09:45:57.628+01:00| mks| W115: Panic in progress... ungrabbing
2018-12-26T09:45:57.628+01:00| mks| I125: MKS: Release starting (Panic)
2018-12-26T09:45:57.628+01:00| mks| I125: MKS: Release finished (Panic)

Timeline

2019-01-14- Vendor Disclosure
2019-04-08 - Coordination between Nvidia & VMware began
2019-05-23 - Disclosure deadline extended
2019-08-02 - Vendor Patched; Public Release

Credit

Discovered by Piotr Bania of Cisco Talos.

TALOS-2019-0812

TALOS-2019-0779

Intelligence Center

Vulnerability Research

Security Resources

Media

Company