horizon_client Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/horizon_client/ Sun, 26 Feb 2023 06:50:53 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png horizon_client Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/horizon_client/ 32 32 CVE-2018-6964 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6964/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6964/ VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on a Linux machine where Horizon Client is installed.

The post CVE-2018-6964 appeared first on CVE Vulnerability.

]]> VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on a Linux machine where Horizon Client is installed.

The post CVE-2018-6964 appeared first on CVE Vulnerability.

]]> CVE-2018-6970 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6970/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6970/ VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privileged process running on a system where Horizon Connection Server, Horizon Agent […]

The post CVE-2018-6970 appeared first on CVE Vulnerability.

]]> VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privileged process running on a system where Horizon Connection Server, Horizon Agent or Horizon Client are installed. Note: This issue doesn’t apply to Horizon 6, 7 Agents installed on Linux systems or Horizon Clients installed on non-Windows systems.

The post CVE-2018-6970 appeared first on CVE Vulnerability.

]]> CVE-2020-3986 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3986/ Sun, 26 Feb 2023 06:41:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3986/ VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the […]

The post CVE-2020-3986 appeared first on CVE Vulnerability.

]]> VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.

The post CVE-2020-3986 appeared first on CVE Vulnerability.

]]> CVE-2020-3987 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3987/ Sun, 26 Feb 2023 06:41:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3987/ VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on […]

The post CVE-2020-3987 appeared first on CVE Vulnerability.

]]> VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.

The post CVE-2020-3987 appeared first on CVE Vulnerability.

]]> CVE-2020-3988 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3988/ Sun, 26 Feb 2023 06:41:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3988/ VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the […]

The post CVE-2020-3988 appeared first on CVE Vulnerability.

]]> VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.

The post CVE-2020-3988 appeared first on CVE Vulnerability.

]]> CVE-2020-3989 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3989/ Sun, 26 Feb 2023 06:41:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3989/ VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial denial-of-service condition on the system where Workstation […]

The post CVE-2020-3989 appeared first on CVE Vulnerability.

]]> VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial denial-of-service condition on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.

The post CVE-2020-3989 appeared first on CVE Vulnerability.

]]> CVE-2020-3990 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3990/ Sun, 26 Feb 2023 06:41:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3990/ VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from TPView process running on the system where Workstation […]

The post CVE-2020-3990 appeared first on CVE Vulnerability.

]]> VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.

The post CVE-2020-3990 appeared first on CVE Vulnerability.

]]> CVE-2020-3991 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3991/ Sun, 26 Feb 2023 06:41:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3991/ VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at install time. This will result into a denial-of-service condition on the […]

The post CVE-2020-3991 appeared first on CVE Vulnerability.

]]> VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at install time. This will result into a denial-of-service condition on the machine where Horizon Client for Windows is installed.

The post CVE-2020-3991 appeared first on CVE Vulnerability.

]]> CVE-2020-3998 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3998/ Sun, 26 Feb 2023 06:41:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3998/ VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes.

The post CVE-2020-3998 appeared first on CVE Vulnerability.

]]> VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes.

The post CVE-2020-3998 appeared first on CVE Vulnerability.

]]> CVE-2020-3951 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-3951/ Sun, 26 Feb 2023 06:41:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-3951/ VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint. Attackers with non-administrative access to a guest VM with virtual printing enabled may exploit this issue to create a denial-of-service condition of the Thinprint service running on the […]

The post CVE-2020-3951 appeared first on CVE Vulnerability.

]]> VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint. Attackers with non-administrative access to a guest VM with virtual printing enabled may exploit this issue to create a denial-of-service condition of the Thinprint service running on the system where Workstation or Horizon Client is installed.

The post CVE-2020-3951 appeared first on CVE Vulnerability.

]]>