Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-33qq-wfvm-3749

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.

EPSS

Процентиль: 15%
0.00048
Низкий

Связанные уязвимости

CVSS3: 6.1
nvd
больше 5 лет назад

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.

CVSS3: 5.4
fstec
больше 5 лет назад

Уязвимость компонента Cortado ThinPrint парсера EMR STRETCHDIBITS платформы виртуализации VMware Workstation и гипервизора Horizon Client for Windows, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации и вызвать отказ в обслуживании

EPSS

Процентиль: 15%
0.00048
Низкий