Out-of-Bounds Read Vulnerability in VMware Workstation and Horizon View Client

CVE-2017-4936

Summary

VMware Workstation and Horizon View Client for Windows are affected by an out-of-bounds read vulnerability in the JPEG2000 parser within TPView.dll. Exploitation of this issue may allow an attacker to execute arbitrary code or initiate a Denial of Service on the underlying Windows operating system running the affected software. For VMware Workstation, a compromised guest can leverage this vulnerability, while for Horizon View Client, a View desktop may facilitate the attack. It's critical for users to apply updates and mitigate the risks associated with this security flaw.

References