Out-of-Bounds Write Vulnerabilities in VMware Workstation and Horizon View Client

CVE-2017-4911

Summary

VMware Workstation and Horizon View Client possess multiple out-of-bounds write vulnerabilities within their JPEG2000 parser, specifically located in the TPView.dll. On VMware Workstation, an attacker may exploit this vulnerability to execute arbitrary code or instigate a Denial of Service on the underlying Windows operating system, provided that virtual printing is enabled. Similarly, for the Horizon View Client, the risk of code execution or Denial of Service exists, dependent on the status of virtual printing, which is enabled by default within this product. It's crucial for users to be aware of the implications of these vulnerabilities and ensure proper configuration and updates.

References