CVE-2017-4936

2017-11-1600:00:00

vmware

www.cve.org

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.7%

JSON

VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client.

CNA Affected

[
  {
    "product": "Workstation",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "12.x before 12.5.8"
      }
    ]
  },
  {
    "product": "Horizon View Client for Windows",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "4.x before 4.6.1"
      }
    ]
  }
]