CVE-2017-4948

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this issue in conjunction with other bugs may allow a View desktop to leak information from host or may allow for a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View.

Metrics

CVSS 3.0 7.1/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125 CWE-200

Affected software

Vendor	Product	Versions
VMware	Workstation	14.x before 14.1.0; 12.x
VMware	Horizon Client for Windows	4.x before 4.7.0

References

http://www.securityfocus.com/bid/102441Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040108Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040109Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040136Third Party Advisory, VDB Entry
https://www.vmware.com/us/security/advisories/VMSA-2018-0003.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/102441Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040108Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040109Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040136Third Party Advisory, VDB Entry
https://www.vmware.com/us/security/advisories/VMSA-2018-0003.htmlPatch, Vendor Advisory

Timeline

Published: Jan 5, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-49497.0VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a CVE-2017-49507.0VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may lead CVE-2017-49518.8VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the A CVE-2017-49527.5VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an au CVE-2017-49559.8An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior CVE-2017-49598.8An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Found CVE-2017-49607.5An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 CVE-2017-49618.8An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an a CVE-2017-49638.1An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4 CVE-2017-49648.8Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created CVE-2017-49656.1An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and t CVE-2017-49667.8An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and t