CVE-2017-4912

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple out-of-bounds read vulnerabilities in TrueType Font TTF parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4909

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain a heap buffer-overflow vulnerability in TrueType Font TTF parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4911

CVE-2017-4911 and related CVEs describe multiple out-of-bounds write/read vulnerabilities affecting VMware Workstation 12.x (pre-12.5.3) and Horizon View Client 4.x (pre-4.4.0) in the JPEG2000/TPView.dll parser, and (for some) TrueType Font handling. The root cause is improper validation inside t...

CVE-2017-4909

CVE-2017-4909 affects VMware Workstation 12.x (pre-12.5.3) and Horizon View Client 4.x (pre-4.4.0). The vulnerability is a heap buffer overflow in the TPView.dll TTF/ JPEG2000 parsing in Cortado ThinPrint, enabling guest-host code execution or Denial of Service on Windows hosts/guests. Exploitati...

CVE-2017-4913

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4912

CVE-2017-4912 is one of multiple out-of-bounds read/write vulnerabilities in VMware TPView.dll’s JPEG2000/TrueType Font parsers that affect VMware Workstation (12.x before 12.5.3) and Horizon View Client (4.x before 4.4.0). The issue arises in the TPView.dll TTF/TFP parsing code and can lead to c...

Horizon View Client update addresses a command injection vulnerability

Horizon View Client command injection vulnerability VMware Horizon View Client contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client i...

Multiple Heap Buffer Overflow Vulnerabilities in VMware Workstation and Horizon View Client

VMware Workstation is a paid and feature-rich set of virtual machine software.VMware Workstation Player is a free open source and simpler virtual machine software.Horizon Client for Windows is used to virtualize desktops and applications. VMware Workstation and Horizon View Client have multiple...

Multiple Read/Write Vulnerabilities in VMware Workstation and Horizon View Client

VMware Workstation is a paid and feature-rich set of virtual machine software.VMware Workstation Player is a free open source and simpler virtual machine software.Horizon Client for Windows is used to virtualize desktops and applications. VMware Workstation and Horizon View Client have multiple...

Multiple Read/Write Vulnerabilities in VMware Workstation and Horizon View Client (CNVD-2017-05881)

VMware Workstation is a paid and feature-rich set of virtual machine software.VMware Workstation Player is a free open source and simpler virtual machine software.Horizon Client for Windows is used to virtualize desktops and applications. VMware Workstation and Horizon View Client have multiple...

The vulnerability of the client system of the VMware Horizon View Client virtualization solution allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPInt.dll library in the VMware Horizon View Client system client involves resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of the client system in the VMware Horizon View Client virtualization solution allows users of the guest operating system to trigger a service failure for the host operating system.

The vulnerability of the TPInt.dll library in the VMware Horizon View Client system client involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of the client system in the VMware Horizon View Client virtualization solution allows users of the guest operating system to trigger a service failure for the host operating system.

The vulnerability of the TPView.dll library in the VMware Horizon View Client virtualization solution is related to resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of the client system of the VMware Horizon View Client virtualization solution allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPView.dll library in the VMware Horizon View Client virtualization solution is related to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

VMware Horizon View Client 5.x < 5.4.2 DACL Privilege Escalation (VMSA-2015-0005)

The version of VMware Horizon View Client installed on the remote host is 5.x with local mode prior to 5.4.2. It is, therefore, affected by a privilege escalation vulnerability due to a failure to provide a valid discretionary access control list DACL pointer for the printproxy.exe process. A loc...

VMware Releases Security Advisory

VMware has released security updates to address a host privilege escalation vulnerability in VMware Workstation, Player and Horizon View Client for Windows. Exploitation of this vulnerability may allow an attacker to escalate privileges on an affected VMware system. Updates available include:...

VMware Horizon View Client 3.2.x < 3.2.1 / 3.3.x < 3.4.0 / or 5.x < 5.4.2 Multiple Vulnerabilities (VMSA-2015-0004)

The version of VMware Horizon View Client installed on the remote host is 3.2.x prior to 3.2.1, 3.3.x prior to 3.4.0, or 5.x with local mode prior to 5.4.2. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists due to a stack-based buffer...

VMware Horizon View Client < 3.0.0 Multiple SSL Vulnerabilities (VMSA-2014-0006)

The version of VMware Horizon View Client installed on the remote host is a version prior to 3.0.0. It is, therefore, affected by multiple vulnerabilities in the bundled OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or...