Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-4837 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4838 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4839 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4840 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4841 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4842 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4843 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4844 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4845 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4846 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4847 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4848 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4849 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4850 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4851 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4852 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4853 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4854 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4855 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4856 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4857 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4858 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4859 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4860 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4861 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4862 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4863 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4864 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4865 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4866 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4867 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4868 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4869 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4870 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4871 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4872 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4873 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4874 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4875 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4876 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4877 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4878 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4879 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4880 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4881 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4882 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4883 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4884 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4885 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4886 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4887 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4888 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4889 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4890 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4891 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4892 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4893 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4894 State: REJECTED Published: 2018-03-16T14:04:00 Last Updated: 2018-03-16T13:57:01 Description: No description available.
CVE ID: CVE-2017-4895 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-05T14:39:41.484Z Vendors: VMware Products: Airwatch Agent Problem Types: Root detection bypass Description: Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection. Successful exploitation of this issue may result in an enrolled device having unrestricted access over local Airwatch security controls and data. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/us/security/advisories/VMSA-2017-0001.html - http://www.securityfocus.com/bid/95892 - http://www.securitytracker.com/id/1037738
CVE ID: CVE-2017-4896 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-05T14:39:41.485Z Vendors: VMware Products: Airwatch Console, Airwatch Inbox Problem Types: Encyption bypass Description: Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95889 - http://www.vmware.com/us/security/advisories/VMSA-2017-0001.html - http://www.securitytracker.com/id/1037738
CVE ID: CVE-2017-4897 State: PUBLISHED Published: 2017-05-31T14:00:00 Last Updated: 2024-08-05T14:39:41.400Z Vendors: VMware Products: Horizon DaaS Problem Types: Lack of input validation Description: VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this vulnerability requires a victim to download a specially crafted RDP file through DaaS client by clicking on a malicious link. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytr
by clicking on a malicious link. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037951 - http://www.securityfocus.com/bid/96559 - http://www.vmware.com/security/advisories/VMSA-2017-0002.html
CVE ID: CVE-2017-4898 State: PUBLISHED Published: 2017-06-07T18:00:00 Last Updated: 2024-08-05T14:39:41.379Z Vendors: VMware Products: Workstation Pro/Player Problem Types: DLL Hijack Description: VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2017-0003.html - http://www.securityfocu
Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2017-0003.html - http://www.securityfocus.com/bid/96772 - http://www.securitytracker.com/id/1037979
CVE ID: CVE-2017-4899 State: PUBLISHED Published: 2017-06-07T18:00:00 Last Updated: 2024-08-05T14:39:41.392Z Vendors: VMware Products: Workstation Pro/Player Problem Types: DoS Description: VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers are installed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96771 - http://www.vmware.com/security/advisories/VMSA-2017-0003.html - http://www.securitytracker.co
urityfocus.com/bid/96771 - http://www.vmware.com/security/advisories/VMSA-2017-0003.html - http://www.securitytracker.com/id/1037979
CVE ID: CVE-2017-4900 State: PUBLISHED Published: 2017-06-07T18:00:00 Last Updated: 2024-08-05T14:39:41.486Z Vendors: VMware Products: Workstation Pro/Player Problem Types: DoS Description: VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96770 - http://www.vmware.com/security/advisories/VMSA-2017-0003.html - http://www.securitytracker.com/id/1037979
CVE ID: CVE-2017-4901 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T14:39:41.308Z Vendors: VMware Products: Workstation Pro/Player, Fusion Pro / Fusion Problem Types: Remote code execution Description: The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability. This may allow a guest to execute code on the operating system that runs Workstation or Fusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0005.html - http://www.securitytracker.com/id/1038025 - http://www.securityfocus.com/bid/
/security/advisories/VMSA-2017-0005.html - http://www.securitytracker.com/id/1038025 - http://www.securityfocus.com/bid/96881
CVE ID: CVE-2017-4902 State: PUBLISHED Published: 2017-06-07T18:00:00 Last Updated: 2024-08-05T14:39:41.428Z Vendors: VMware Products: ESXi, Workstation Pro / Player, Fusion Pro / Fusion Problem Types: Heap Buffer Overflow Description: VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2017-0006.html - http://www.securitytracker.com/id/1038148 - http://www.
http://www.vmware.com/security/advisories/VMSA-2017-0006.html - http://www.securitytracker.com/id/1038148 - http://www.securityfocus.com/bid/97163 - http://www.securitytracker.com/id/1038149
CVE ID: CVE-2017-4903 State: PUBLISHED Published: 2017-06-07T18:00:00 Last Updated: 2024-08-05T14:39:41.551Z Vendors: VMware Products: ESXi, Workstation Pro / Player, Fusion Pro / Fusion Problem Types: Uninitialized Stack Memory Usage Description: VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have an uninitialized stack memory usage in SVGA. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - C
ized stack memory usage in SVGA. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97160 - http://www.vmware.com/security/advisories/VMSA-2017-0006.html - http://www.securitytracker.com/id/1038148 - http://www.securitytracker.com/id/1038149
CVE ID: CVE-2017-4904 State: PUBLISHED Published: 2017-06-07T18:00:00 Last Updated: 2024-08-05T14:39:41.527Z Vendors: VMware Products: ESXi, Workstation Pro / Player, Fusion Pro / Fusion Problem Types: Remote Code Execution / DoS Description: The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 has uninitialized memory usage. This issue may allow a guest to execute code on the host. The issue is reduced to a Den
has uninitialized memory usage. This issue may allow a guest to execute code on the host. The issue is reduced to a Denial of Service of the guest on ESXi 5.5. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97165 - http://www.vmware.com/security/advisories/VMSA-2017-0006.html - http://www.securitytracker.com/id/1038148 - http://www.securitytracker.com/id/1038149
CVE ID: CVE-2017-4905 State: PUBLISHED Published: 2017-06-07T18:00:00 Last Updated: 2024-08-05T14:39:41.549Z Vendors: VMware Products: ESXi, Workstation Pro / Player, Fusion Pro / Fusion Problem Types: Information leak Description: VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.secu
issue may lead to an information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97164 - http://www.vmware.com/security/advisories/VMSA-2017-0006.html - http://www.securitytracker.com/id/1038148 - http://www.securitytracker.com/id/1038149
CVE ID: CVE-2017-4907 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T14:39:41.397Z Vendors: VMware Products: Unified Access Gateway, Horizon View Problem Types: Heap buffer-overflow vulnerability Description: VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038281 - http://www.securityfocus.com/bid/97914 - http://www.vmware.com/security/advisories/VMSA-2017-0008.html
CVE ID: CVE-2017-4908 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T14:39:41.514Z Vendors: VMware Products: Workstation, Horizon View Client for Windows Problem Types: Heap-based buffer overflow issues via Cortado ThinPrint Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows
e of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038281 - http://www.securityfocus.com/bid/97912 - http://www.securitytracker.com/id/1038280 - http://www.vmware.com/security/advisories/VMSA-2017-0008.html
CVE ID: CVE-2017-4909 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T14:39:41.554Z Vendors: VMware Products: Workstation, Horizon View Client for Windows Problem Types: Heap-based buffer overflow issue via Cortado ThinPrint Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueType Font (TTF) parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows
se of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038281 - http://www.securityfocus.com/bid/97911 - http://www.securitytracker.com/id/1038280 - http://www.vmware.com/security/advisories/VMSA-2017-0008.html
CVE ID: CVE-2017-4910 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T14:39:41.525Z Vendors: VMware Products: Workstation, Horizon View Client for Windows Problem Types: Out-of-bounds read issues via Cortado ThinPrint Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that ru
izon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038281 - http://www.securityfocus.com/bid/97913 - http://www.securitytracker.com/id/1038280 - http://www.vmware.com/security/advisories/VMSA-2017-0008.html
CVE ID: CVE-2017-4911 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T14:39:41.516Z Vendors: VMware Products: Workstation, Horizon View Client for Windows Problem Types: Out-of-bounds write issues via Cortado ThinPrint Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that
orizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038281 - http://www.securitytracker.com/id/1038280 - http://www.securityfocus.com/bid/97916 - http://www.vmware.com/security/advisories/VMSA-2017-0008.html
CVE ID: CVE-2017-4912 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T14:47:42.914Z Vendors: VMware Products: Workstation, Horizon View Client for Windows Problem Types: Out-of-bounds read issues via Cortado ThinPrint Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueType Font (TTF) parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows