Out-of-Bounds Read Vulnerabilities in VMware Workstation and Horizon View Client

CVE-2017-4910

Summary

VMware Workstation and Horizon View Client are susceptible to multiple out-of-bounds read vulnerabilities due to flaws in the JPEG2000 parser found in TPView.dll. If exploited, these vulnerabilities could enable a guest OS to execute arbitrary code or cause a Denial of Service on the Windows host OS running VMware Workstation or Horizon View Client. This exploitation requires that the virtual printing feature be activated, which is enabled by default in Horizon View but not in Workstation.

References