Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cv52-p88m-2mj7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.

EPSS

Процентиль: 17%
0.00053
Низкий

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.

CVSS3: 4.5
fstec
больше 4 лет назад

Уязвимость парсеров TTC и JPEG2000 гипервизора VMware Workstation и клиента системы виртуализации рабочих станций VMware Horizon Client for Windows, связанная с раскрытием информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 17%
0.00053
Низкий

Дефекты

CWE-125