VMware Workstation and Horizon View Client CVE-2016-4909 Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	97911
Class:	Boundary Condition Error
CVE:	CVE-2017-4909
Remote:	Yes
Local:	No
Published:	Apr 18 2017 12:00AM
Updated:	May 02 2017 12:06AM
Credit:	The vendor reported the issue.
Vulnerable:	VMWare Workstation 12.0 VMWare Horizon View Client 6.2 VMWare Horizon View Client 7.0
Not Vulnerable:	VMWare Workstation 12.5.3 VMWare Horizon View Client 7.1 VMWare Horizon View Client 6.2.4

VMware Workstation and Horizon View Client CVE-2016-4909 Heap Based Buffer Overflow Vulnerability

VMware Workstation and Horizon View Client are prone to a heap-based buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code on the host. Failed exploits can result in a denial-of-service condition.

The following products are vulnerable:

VMware Workstation 12.x
VMware Horizon View Client 6.2.x and 7.x.

VMware Workstation and Horizon View Client CVE-2016-4909 Heap Based Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

VMware Workstation and Horizon View Client CVE-2016-4909 Heap Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

VMware Workstation and Horizon View Client CVE-2016-4909 Heap Based Buffer Overflow Vulnerability

References:

• VMware Homepage (VMware)
  
• VMSA-2017-0008: VMware Unified Access Gateway, Horizon View and Workstation upda (VMWare)