CVE-2017-4936: vmware horizon_view Out-of-bounds Read
Vulnerability summary
CVE-2017-4936 is a high (CVSS 7.8) Out-of-bounds Read vulnerability in vmware horizon_view. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.9% of scored vulnerabilities.
Timeline
- 17-11-2017PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.39%
Chance of exploitation in the next 30 days
Percentile
32%
Versus all other CVEs
30-day change
0.00 pp
From 0.39% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Vmware3 products
- horizon_view4.0.0 | 4.0.1 | 4.1 | 4.2 | 4.3 | 4.4 | 4.5 | 4.6
- horizon view client for windows4.x before 4.6.1
- workstation12.x before 12.5.8 | 12.0.0 | 12.0.1 | 12.1 | 12.1.1 | 12.5 | 12.5.1 | 12.5.2 | 12.5.3 | 12.5.4 | 12.5.5 | 12.5.6 | 12.5.7
1 vendor · 3 products