CVE-2020-3951
Severity
3.8LOW
EPSS
0.1%
top 69.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 17
Latest updateMay 24
Description
VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint. Attackers with non-administrative access to a guest VM with virtual printing enabled may exploit this issue to create a denial-of-service condition of the Thinprint service running on the system where Workstation or Horizon Client is installed.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:LExploitability: 2.0 | Impact: 1.4
Affected Packages3 packages
▶CVEListV5vmware_workstation_and_horizon_client_for_windowsVMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0)
🔴Vulnerability Details
2📋Vendor Advisories
1VMware▶
VMware Workstation, Fusion, VMware Remote Console and Horizon Client updates address privilege escalation and denial-of-service vulnerabilities (CVE-2020-3950, CVE-2020-3951)↗2020-03-17