Not rated
CVE-2017-4935 VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an…
Description
VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View Client.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Workstation | Versions not published | |
| Horizon View Client for Windows | Versions not published |
References
- www.vmware.com www.vmware.com
- 1039836 www.securitytracker.com
- 1039835 www.securitytracker.com
- 101902 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Workstation
The 53 CVEs of Workstation →
CVE-2026-41703
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability
7.6
High
CVE-2026-22717
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with…
2.7
Low
CVE-2026-22716
Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with…
5.0
Medium
CVE-2026-22722
A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null…
6.1
Medium