CVE Vulnerability

CVE-2022-22938

VMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3) contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this issue to trigger a denial-of-service condition in the Thinprint service running on the host machine where VMware Workstation or Horizon Client for Windows is installed.

2.1 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

6.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2 / Impact : 4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.vmware.com/security/advisories/VMSA-2022-0002.html Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:vmware:horizon:*:*:*:*:*:windows:*:*
Information

Published : 2022-01-28 08:15

Updated : 2022-02-04 02:18

NVD link : CVE-2022-22938

Mitre link : CVE-2022-22938

Products Affected

Vmware

Workstation

CWE
NVD-CWE-noinfo