Out-of-Bounds Read Vulnerability in VMware Workstation and Horizon View Client

CVE-2017-4937

Summary

VMware Workstation prior to version 12.5.8 and Horizon View Client for Windows prior to version 4.6.1 are susceptible to an out-of-bounds read vulnerability in the JPEG2000 parser within the TPView.dll library. Successful exploitation may allow an attacker to execute arbitrary code or initiate a Denial of Service (DoS) condition on the underlying Windows operating system. The potential for exploitation exists when the virtual printing feature is active, which is not enabled by default in Workstation but is enabled by default in Horizon View Client.

References