Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w69v-q5pj-q9r2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000 Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000 Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.

EPSS

Процентиль: 17%
0.00053
Низкий

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000 Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.

CVSS3: 4
fstec
больше 4 лет назад

Уязвимость компонента Cortado ThinPrint (JPEG2000 Parser) гипервизора VMware Workstation и клиента системы виртуализации рабочих станций VMware Horizon Client for Windows, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 17%
0.00053
Низкий

Дефекты

CWE-125