CVE-2019-5544

CVE-2019-5544 refers to a heap-based buffer overflow in OpenSLP used by VMware ESXi and Horizon DaaS, triggered by processing URLs in service requests to port 427. The root cause is improper bounds checking in the OpenSLP slpd service (ProcessSrvRqst), enabling remote code execution via a crafted...

CVE-2017-4897

Affected product: VMware Horizon DaaS prior to 7.0.0. The issue arises from insufficient validation of data, allowing an attacker to mislead DaaS clients into connecting to a malicious server and exposing drives/devices after the victim downloads a specially crafted RDP file via a malicious link....

CVE-2020-3977

CVE-2020-3977 affects VMware Horizon DaaS 7.x and 8.x prior to 8.0.1 Update 1. Root cause: broken authentication due to how first-factor authentication is handled, enabling potential bypass of two-factor authentication for an attacker with a legitimate Horizon DaaS account. Impact: partial integr...

CVE-2018-6960

VMware Horizon DaaS (7.x before 8.0.0) is affected by a broken authentication vulnerability that may allow bypass of two-factor authentication when an attacker has a legitimate Horizon DaaS account. The issue is addressed by VMware in VMSA-2018-0010; remediation is to apply the Horizon DaaS updat...