VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability (CNVD-2017-37491)

VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...

CVE-2017-1000128

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

PYSEC-2017-117

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

Design/Logic Flaw

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

PYSEC-2017-117

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

CVE-2017-1000128

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

CVE-2017-1000128

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

CVE-2017-1000128

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

CVE-2017-1000128

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...

CVE-2017-1000128

CVE-2017-1000128 affects Exiv2 up to version 0.26, reporting a stack out-of-bounds read in the JPEG2000 parser. Public details in connected docs confirm the issue and its remediation: updated to Exiv2 0.27.5 fixes the vulnerability. SUSE advisory SUSE-SU-2022:3889-1 and OSV notes list CVE-2017-10...

CVE-2017-4935

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

Out-of-bounds

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

Out-of-bounds

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4936

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

Out-of-bounds

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4936

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4937

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4935

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4937

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4935

CVE-2017-4935 affects VMware Workstation 12.x prior to 12.5.8 and Horizon View Client for Windows 4.x prior to 4.6.1. The vulnerability is an out-of-bounds write in the JPEG2000 parser within TPView.dll that can allow a guest operating on the host to execute code or cause a Denial of Service on t...