VMware Workstation and Horizon Client CVE-2017-4913 Integer Overflow Vulnerability
BID:97920
Info
VMware Workstation and Horizon Client CVE-2017-4913 Integer Overflow Vulnerability
| Bugtraq ID: | 97920 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-4913 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 18 2017 12:00AM |
| Updated: | May 02 2017 03:06AM |
| Credit: | Ke Liu of Tencent's Xuanwu Lab. |
| Vulnerable: |
VMWare Workstation 12.0 VMWare Horizon View 7.0.1 VMWare Horizon View 6.2.3 VMWare Horizon View 7.0 |
| Not Vulnerable: |
VMWare Workstation 12.5.3 VMWare Horizon View 7.1 VMWare Horizon View 6.2.4 |
Discussion
VMware Workstation and Horizon Client CVE-2017-4913 Integer Overflow Vulnerability
VMware Workstation and Horizon Client are prone to an integer-overflow vulnerability.
Successfully exploiting this issue allows attackers to execute arbitrary code. Failed exploits will result in denial-of-service conditions.
The following products are vulnerable:
Horizon View Client versions 7.x prior to 7.1.0 and 6.2.x prior to 6.2.4 are vulnerable.
Workstation versions 12.x prior to 12.5.3 are vulnerable.
VMware Workstation and Horizon Client are prone to an integer-overflow vulnerability.
Successfully exploiting this issue allows attackers to execute arbitrary code. Failed exploits will result in denial-of-service conditions.
The following products are vulnerable:
Horizon View Client versions 7.x prior to 7.1.0 and 6.2.x prior to 6.2.4 are vulnerable.
Workstation versions 12.x prior to 12.5.3 are vulnerable.
Exploit / POC
VMware Workstation and Horizon Client CVE-2017-4913 Integer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
VMware Workstation and Horizon Client CVE-2017-4913 Integer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
VMware Workstation and Horizon Client CVE-2017-4913 Integer Overflow Vulnerability
References:
References: