The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.3. It is, therefore, affected by multiple vulnerabilities :

  - A heap buffer overflow condition exists in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     JPEG2000 files. An attacker on the guest can exploit     this to cause a denial of service condition or the     execution or arbitrary code on the host system.
    (CVE-2017-4908)

  - A heap buffer overflow condition exists in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     TrueType Fonts. An attacker on the guest can exploit     this to cause a denial of service condition or the     execution or arbitrary code on the host system.
    (CVE-2017-4909)

  - Out-of-bounds read and write errors exist in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     JPEG2000 files. An attacker on the guest can exploit     these to corrupt memory, resulting in a denial of     service condition or the execution of arbitrary code on     the host system. (CVE-2017-4910, CVE-2017-4911)

  - Out-of-bounds read and write errors exist in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     TrueType Fonts. An attacker on the guest can exploit     these to corrupt memory, resulting in a denial of service     condition or the execution of arbitrary code on the host     system. (CVE-2017-4912)

  - An integer overflow condition exists in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     TrueType Fonts. An attacker on the guest can exploit     this to corrupt memory, resulting in a denial of service     condition or the execution of arbitrary code on the host     system. (CVE-2017-4913)

The above vulnerabilities can be exploited only if virtual printing has been enabled. This feature is not enabled by default on VMware Workstation.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of VMware Horizon View Client installed on the remote host is 4.x prior to 4.4.0. It is, therefore, affected by multiple vulnerabilities :

  - A heap buffer overflow condition exists in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     JPEG2000 files. An attacker on the guest can exploit     this to cause a denial of service condition or the     execution or arbitrary code on the host system.
    (CVE-2017-4908)

  - A heap buffer overflow condition exists in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     TrueType Fonts. An attacker on the guest can exploit     this to cause a denial of service condition or the     execution or arbitrary code on the host system.
    (CVE-2017-4909)

  - Out-of-bounds read and write errors exist in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     JPEG2000 files. An attacker on the guest can exploit     these to corrupt memory, resulting in a denial of     service condition or the execution of arbitrary code on     the host system. (CVE-2017-4910, CVE-2017-4911)

  - Out-of-bounds read and write errors exist in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     TrueType Fonts. An attacker on the guest can exploit     these to corrupt memory, resulting in a denial of service     condition or the execution of arbitrary code on the host     system. (CVE-2017-4912)

  - An integer overflow condition exists in the Cortado     ThinPrint component, specifically within TPView.dll,     due to improper validation of certain input when parsing     TrueType Fonts. An attacker on the guest can exploit     this to corrupt memory, resulting in a denial of service     condition or the execution of arbitrary code on the host     system. (CVE-2017-4913)

The above vulnerabilities can be exploited only if virtual printing has been enabled. This feature is enabled by default on VMware Horizon View.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモートのWindowsホストにインストールされているVMware Workstationのバージョンは、12.5.3より前の12.xです。したがって、以下の複数の脆弱性による影響を受けます。

  - A heap buffer overflow condition exists in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing JPEG2000 files. ゲストにある攻撃者が、この脆弱性を悪用して、サービス拒否状態を引き起こしたり、ホストシステムで任意のコードを実行したりする可能性があります。
    (CVE-2017-4908)

  - A heap buffer overflow condition exists in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing TrueType Fonts. ゲストにある攻撃者が、この脆弱性を悪用して、サービス拒否状態を引き起こしたり、ホストシステムで任意のコードを実行したりする可能性があります。
    (CVE-2017-4909)

  - Out-of-bounds read and write errors exist in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing JPEG2000 files. An attacker on the guest can exploit these to corrupt memory, resulting in a denial of service condition or the execution of arbitrary code on the host system. (CVE-2017-4910, CVE-2017-4911)

  - Out-of-bounds read and write errors exist in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing TrueType Fonts. An attacker on the guest can exploit these to corrupt memory, resulting in a denial of service condition or the execution of arbitrary code on the host system. (CVE-2017-4912)

  - An integer overflow condition exists in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing TrueType Fonts. An attacker on the guest can exploit this to corrupt memory, resulting in a denial of service condition or the execution of arbitrary code on the host system. (CVE-2017-4913)

仮想印刷が有効になっている場合にのみ、上記の脆弱性が悪用される可能性があります。VMware Workstationでは、この機能はデフォルトで有効になっていません。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The version of VMware Horizon View Client installed on the remote host is 4.x prior to 4.4.0. したがって、以下の複数の脆弱性による影響を受けます。

  - A heap buffer overflow condition exists in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing JPEG2000 files. ゲストにある攻撃者が、この脆弱性を悪用して、サービス拒否状態を引き起こしたり、ホストシステムで任意のコードを実行したりする可能性があります。
    (CVE-2017-4908)

  - A heap buffer overflow condition exists in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing TrueType Fonts. ゲストにある攻撃者が、この脆弱性を悪用して、サービス拒否状態を引き起こしたり、ホストシステムで任意のコードを実行したりする可能性があります。
    (CVE-2017-4909)

  - Out-of-bounds read and write errors exist in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing JPEG2000 files. An attacker on the guest can exploit these to corrupt memory, resulting in a denial of service condition or the execution of arbitrary code on the host system. (CVE-2017-4910, CVE-2017-4911)

  - Out-of-bounds read and write errors exist in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing TrueType Fonts. An attacker on the guest can exploit these to corrupt memory, resulting in a denial of service condition or the execution of arbitrary code on the host system. (CVE-2017-4912)

  - An integer overflow condition exists in the Cortado ThinPrint component, specifically within TPView.dll, due to improper validation of certain input when parsing TrueType Fonts. An attacker on the guest can exploit this to corrupt memory, resulting in a denial of service condition or the execution of arbitrary code on the host system. (CVE-2017-4913)

仮想印刷が有効になっている場合にのみ、上記の脆弱性が悪用される可能性があります。VMware Horizo​​n Viewでは、この機能はデフォルトで有効になっています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

远程 Windows 主机上安装的 VMware Workstation 12.x 版本低于 12.5.3。因而会受到多个漏洞的影响：- 由于在分析 JPEG2000 文件时未正确验证某些输入，Cortado ThinPrint 组件中存在堆缓冲区溢出情况，尤其是在 TPView.dll 中。客户机上的攻击者可利用此情况造成拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4908) - 由于在分析 TrueType 字体时未正确验证某些输入，Cortado ThinPrint 组件中存在堆缓冲区溢出情况，尤其是在 TPView.dll 中。客户机上的攻击者可利用此情况造成拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4909) - 由于在分析 JPEG2000 文件时未正确验证某些输入，Cortado ThinPrint 组件中存在越界读写错误，尤其是在 TPView.dll 中。客户机上的攻击者可利用这些错误造成内存损坏，进而导致拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4910, CVE-2017-4911) - 由于在分析 TrueType 字体时未正确验证某些输入，Cortado ThinPrint 组件中存在越界读写入错误，尤其是在 TPView.dll 中。客户机上的攻击者可利用这些错误造成内存损坏，进而导致拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4912) - 由于在分析 TrueType 字体时未正确验证某些输入，Cortado ThinPrint 组件中存在整数溢出情况，尤其是在 TPView.dll 中。客户机上的攻击者可利用此情况损坏内存，进而造成拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4913) 只有在启用虚拟打印时，上述漏洞才可遭到利用。默认情况下，VMware Workstation 未启用此功能。请注意，Nessus 并未测试这些问题，而是只依赖于应用程序自我报告的版本号。

远程主机上安装的 VMware Horizon View Client 版本为低于 4.4.0 的 4.x。因而会受到多个漏洞的影响：- 由于在分析 JPEG2000 文件时未正确验证某些输入，Cortado ThinPrint 组件中存在堆缓冲区溢出情况，尤其是在 TPView.dll 中。客户机上的攻击者可利用此情况造成拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4908) - 由于在分析 TrueType 字体时未正确验证某些输入，Cortado ThinPrint 组件中存在堆缓冲区溢出情况，尤其是在 TPView.dll 中。客户机上的攻击者可利用此情况造成拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4909) - 由于在分析 JPEG2000 文件时未正确验证某些输入，Cortado ThinPrint 组件中存在越界读写错误，尤其是在 TPView.dll 中。客户机上的攻击者可利用这些错误造成内存损坏，进而导致拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4910, CVE-2017-4911) - 由于在分析 TrueType 字体时未正确验证某些输入，Cortado ThinPrint 组件中存在越界读写入错误，尤其是在 TPView.dll 中。客户机上的攻击者可利用这些错误造成内存损坏，进而导致拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4912) - 由于在分析 TrueType 字体时未正确验证某些输入，Cortado ThinPrint 组件中存在整数溢出情况，尤其是在 TPView.dll 中。客户机上的攻击者可利用此情况损坏内存，进而造成拒绝服务情况或在主机系统上执行任意代码。(CVE-2017-4913) 只有在启用虚拟打印时，上述漏洞才可遭到利用。VMware Horizon View 中默认启用此功能。请注意，Nessus 并未测试这些问题，而是只依赖于应用程序自我报告的版本号。

遠端 Windows 主機上安裝的 VMware Workstation 版本是比 12.5.3 舊的 12.x 版。因此，會受到多個弱點影響：- Cortado ThinPrint 元件中存在一個堆積緩衝區溢位情形 (TPView.dll 的特有問題)，這是因為在剖析 JPEG2000 檔案時不當驗證特定輸入所致。來賓上的攻擊者可加以惡意利用，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4908) - Cortado ThinPrint 元件中存在一個堆積緩衝區溢位情形 (TPView.dll 的特有問題)，這是因為在剖析 TrueType 字型時不當驗證特定輸入所致。來賓上的攻擊者可加以惡意利用，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4909) - Cortado ThinPrint 元件中存在多個越界讀取和寫入錯誤 (TPView.dll 的特有問題)，這是因為在剖析 JPEG2000 檔案時不當驗證特定輸入所致。客體上的攻擊者可惡意利用這些錯誤來損毀記憶體，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4910、CVE-2017-4911) - Cortado ThinPrint 元件中存在多個越界讀取和寫入錯誤 (TPView.dll 的特有問題)，這是因為在剖析 TrueType 字型時不當驗證特定輸入所致。客體上的攻擊者可惡意利用這些錯誤來損毀記憶體，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4912) - Cortado ThinPrint 元件中存在一個整數溢位情形 (TPView.dll 的特有問題)，這是因為在剖析 TrueType 字型時不當驗證特定輸入所致。客體上的攻擊者可加以惡意利用來損毀記憶體，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4913) 唯有啟用虛擬列印時，才有可能惡意利用上述弱點。VMware Workstation 預設不會啟用此功能。請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

遠端主機上安裝的 Vmware Horizon View Client 版本為 4.4.0 之前的 4.x 版。因此，會受到多個弱點影響：- Cortado ThinPrint 元件中存在一個堆積緩衝區溢位情形 (TPView.dll 的特有問題)，這是因為在剖析 JPEG2000 檔案時不當驗證特定輸入所致。來賓上的攻擊者可惡意利用此弱點，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4908) - Cortado ThinPrint 元件中存在一個堆積緩衝區溢位情形 (TPView.dll 的特有問題)，這是因為在剖析 TrueType 字型時不當驗證特定輸入所致。來賓上的攻擊者可惡意利用此弱點，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4909) - Cortado ThinPrint 元件中存在多個越界讀取和寫入錯誤 (TPView.dll 的特有問題)，這是因為在剖析 JPEG2000 檔案時不當驗證特定輸入所致。客體上的攻擊者可惡意利用這些錯誤來損毀記憶體，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4910、CVE-2017-4911) - Cortado ThinPrint 元件中存在多個越界讀取和寫入錯誤 (TPView.dll 的特有問題)，這是因為在剖析 TrueType 字型時不當驗證特定輸入所致。客體上的攻擊者可惡意利用這些錯誤來損毀記憶體，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4912) - Cortado ThinPrint 元件中存在一個整數溢位情形 (TPView.dll 的特有問題)，這是因為在剖析 TrueType 字型時不當驗證特定輸入所致。客體上的攻擊者可惡意利用此情形來損毀記憶體，造成拒絕服務情形或在主機系統上執行任意程式碼。(CVE-2017-4913) 唯有啟用虛擬列印時，才有可能惡意利用上述弱點。VMware Horizon View 中會預設啟用此功能。請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

ID	Name	Product	Family	Published	Updated	Severity
99590	VMware Workstation 12.x < 12.5.3 Multiple Vulnerabilities (VMSA-2017-0008)	Nessus	Windows	4/21/2017	3/15/2023	high
99709	VMware Horizon View Client 4.x < 4.4.0 Multiple Vulnerabilities (VMSA-2017-0008)	Nessus	Windows	4/27/2017	11/13/2019	high
99590	VMware Workstation 12.x < 12.5.3の複数の脆弱性 (VMSA-2017-0008)	Nessus	Windows	4/21/2017	3/15/2023	high
99709	VMware Horizon View Client 4.x < 4.4.0の複数の脆弱性（VMSA-2017-0008）	Nessus	Windows	4/27/2017	11/13/2019	high
99590	VMware Workstation 12.x < 12.5.3 多个漏洞 (VMSA-2017-0008)	Nessus	Windows	4/21/2017	3/15/2023	high
99709	VMware Horizon View Client 4.x < 4.4.0 多个漏洞 (VMSA-2017-0008)	Nessus	Windows	4/27/2017	11/13/2019	high
99590	VMware Workstation 12.x < 12.5.3 多個弱點 (VMSA-2017-0008)	Nessus	Windows	4/21/2017	3/15/2023	high
99709	VMware Horizon View Client 4.x < 4.4.0 多個弱點 (VMSA-2017-0008)	Nessus	Windows	4/27/2017	11/13/2019	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high