CVE-2020-3988

Description

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

EPSS Score

Exploitation Probability

0.048

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in VMware Horizon Client (x64) 5.4.3	Windows
Multiple Vulnerabilities are affected in VMware Horizon Client 5.4.3	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234