CVE-2017-4910

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4913

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

Heap overflow

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple heap buffer-overflow vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

Out-of-bounds

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

Out-of-bounds

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4912

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple out-of-bounds read vulnerabilities in TrueType Font TTF parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4913

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4912

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple out-of-bounds read vulnerabilities in TrueType Font TTF parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4911

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4913

CVE-2017-4913 is a TPView.dll TrueType Font parser integer overflow vulnerability affecting VMware Workstation 12.x before 12.5.3 and Horizon View Client 4.x before 4.4.0. The issue can allow a guest OS to execute arbitrary code or cause a Denial of Service on Windows hosts running Workstation or...

CVE-2017-4901

The CVE-2017-4901 entry relates to VMware Workstation 12.x (before 12.5.4) and VMware Fusion 8.x (before 8.5.5), where the drag-and-drop (DnD) function has an out-of-bounds memory access vulnerability. The cited sources describe a potential for a guest operating system to execute code on the host...

CVE-2017-4909

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain a heap buffer-overflow vulnerability in TrueType Font TTF parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4911

CVE-2017-4911 and related CVEs describe multiple out-of-bounds write/read vulnerabilities affecting VMware Workstation 12.x (pre-12.5.3) and Horizon View Client 4.x (pre-4.4.0) in the JPEG2000/TPView.dll parser, and (for some) TrueType Font handling. The root cause is improper validation inside t...

CVE-2017-4910

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4908

VMware Workstation 12.x prior to 12.5.3 and Horizon View Client 4.x prior to 4.4.0 contain multiple heap buffer-overflow vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs...

CVE-2017-4910

CVE-2017-4910 refers to multiple out-of-bounds read vulnerabilities in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x (before 12.5.3) and Horizon View Client 4.x (before 4.4.0). The root cause is improper validation in TPView.dll leading to code execution or Denial of Service ...

CVE-2017-4908

Summary: CVE-2017-4908 affects VMware Workstation 12.x (pre-12.5.3) and Horizon View Client 4.x (pre-4.4.0) due to multiple heap buffer-overflow flaws in the JPEG2000/TFF TPView.dll parser. Exploitation is local and requires virtual printing to be enabled (default on Horizon View; not on Workstat...

CVE-2017-4912

CVE-2017-4912 is one of multiple out-of-bounds read/write vulnerabilities in VMware TPView.dll’s JPEG2000/TrueType Font parsers that affect VMware Workstation (12.x before 12.5.3) and Horizon View Client (4.x before 4.4.0). The issue arises in the TPView.dll TTF/TFP parsing code and can lead to c...

CVE-2017-4909

CVE-2017-4909 affects VMware Workstation 12.x (pre-12.5.3) and Horizon View Client 4.x (pre-4.4.0). The vulnerability is a heap buffer overflow in the TPView.dll TTF/ JPEG2000 parsing in Cortado ThinPrint, enabling guest-host code execution or Denial of Service on Windows hosts/guests. Exploitati...

VMware Workstation 12 Pro - Denial of Service

VMware Workstation 12 Pro - Denial of Service / Title: NULL pointer dereference vulnerability in vstor2 driver VMware Workstation Pro/Player CVE: 2017-4916 VMSA-2017-0009 Author: Borja Merino @BorjaMerino Date: May 18, 2017 Tested on: Windows 10 Pro and Windows 7 Pro SP1 with VMware® Workstation ...