Out-of-bounds

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4936

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4936

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4937

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4935

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4937

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4935

CVE-2017-4935 affects VMware Workstation 12.x prior to 12.5.8 and Horizon View Client for Windows 4.x prior to 4.6.1. The vulnerability is an out-of-bounds write in the JPEG2000 parser within TPView.dll that can allow a guest operating on the host to execute code or cause a Denial of Service on t...

CVE-2017-4936

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4936

CVE-2017-4936 is an out-of-bounds read vulnerability in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1. The issue may allow a guest to execute code or cause a Denial of Service on the host or View desktop. VMwa...

CVE-2017-4935

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4937

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4937

CVE-2017-4937 refers to an out-of-bounds read vulnerability in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x prior to 12.5.8 and Horizon View Client for Windows 4.x prior to 4.6.1. Exploitation can lead to code execution or Denial of Service on the host OS in scenarios where ...

VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities

a. Heap buffer-overflow vulnerability in VMNAT device VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host. VMware would like to thank Jun Mao of Tencent PC Manager working with Trend Micro's Zero Day...

KLA11143 Multiple vulnerabilities in VMware Workstation, Fusion and Horizon View Client

Multiple serious vulnerabilities have been found in VMware Workstation, Fusion and Horizon View Client. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities: 1. A heap...

VMSA-2017-0018:VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities

VMSA-2017-0018.1 VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0018.1 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware Workstation,...

Unidesk - New desktops show black screens in VMware Horizon View

When connecting to a new desktop from the Horizon View client or a PCoIP Thin/ZeroClient, one or more monitors shows nothing but a black screen...

The vulnerability of the Horizon View virtualization platform and the Unified Access Gateway access server is caused by a buffer overflow in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Horizon View virtualization platform and the Unified Access Gateway access server stems from a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code on the device...

The vulnerability of the script that launches the system service for VMware Horizon View Clients allows a perpetrator to elevate their privileges to superuser status.

The vulnerability of the script that executes system services for VMware Horizon View Clients is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows an unprivileged attacker to escalate their privileges to those of a superuser...

Citrix App layering: Recipe for USB Drivers With VMWARE Horizon View 5.X

Overview The purpose is to explain a process for getting USB Hardware related device drivers working in a Unidesk Layer in conjunction with software application that may require peripheral device support. Tested Devices This document utilize these kinds of devices in our testing: Dell USB Laser...

VMware Horizon View Client 2.x / 3.x / 4.x < 4.5.0 Startup Script Command Injection (VMSA-2017-0011) (macOS)

The version of VMware Horizon View Client installed on the remote macOS or Mac OS X host is 2.x, 3.x, or 4.x prior to 4.5.0. It is, therefore, affected by a command injection vulnerability in the service startup script due to improper validation of user-supplied input. A local attacker can exploi...