Out-of-Bounds Read Vulnerability in VMware Workstation and Horizon View Client

CVE-2017-4948

What is CVE-2017-4948?

VMware Workstation and Horizon View Client have a vulnerability in TPView.dll that allows for information leaks and potential Denial of Service on the Windows OS. This occurs under specific circumstances, particularly if virtual printing is enabled. While this feature is disabled by default in Workstation, it is enabled by default in Horizon View, increasing its risk profile. Attackers may exploit this vulnerability in conjunction with other issues to gain unauthorized access to sensitive data or disrupt service, thus requiring immediate attention and remediation.

References