Vulnerability Description
VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Workstation | 12.0.0 |
| Vmware | Horizon View | 4.0.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/101892Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039835Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039836Third Party AdvisoryVDB Entry
- https://www.vmware.com/security/advisories/VMSA-2017-0018.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/101892Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039835Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039836Third Party AdvisoryVDB Entry
- https://www.vmware.com/security/advisories/VMSA-2017-0018.htmlPatchVendor Advisory
FAQ
What is CVE-2017-4936?
CVE-2017-4936 is a vulnerability with a CVSS score of 7.8 (HIGH). VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this ma...
How severe is CVE-2017-4936?
CVE-2017-4936 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-4936?
Check the references section above for vendor advisories and patch information. Affected products include: Vmware Workstation, Vmware Horizon View.