CWE Code: 125
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Out-of-bounds Read
Summary: vmware horizon 6 (6.x.x before 6.2.7), horizon 7 (7.x.x before 7.5.1), and horizon client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the message framework library. successfully exploiting this issue may allow a less-privileged user to leak information from a privileged process running on a system where horizon connection server, horizon agent or horizon client are installed. note: this issue doesn't apply to horizon 6, 7 agents installed on linux systems or horizon clients installed on non-windows systems.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-08-13
Last Modified Date: 2018-10-15