Denial of Service Vulnerability in VMware Workstation and Horizon Client
CVE-2020-3989
Key Information:
- Vendor
Vmware
- Vendor
- CVE Published:
- 16 September 2020
What is CVE-2020-3989?
VMware Workstation and Horizon Client for Windows contain a vulnerability in the Cortado ThinPrint component that may allow an attacker with normal access to a virtual machine to exploit an out-of-bounds write issue. If successful, this could lead to a partial denial-of-service condition on the host system where these applications are installed. It is important to note that exploitation is only feasible if the virtual printing feature is enabled, which is not enabled by default in Workstation but is enabled by default in Horizon Client.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
VMware Workstation and Horizon Client for Windows VMware Workstation (15.x), Horizon Client for Windows (5.x before 5.4.4)
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved