CVE-2020-3987

CWE-125 — Out-of-bounds ReadCWE-122 — Heap-based Buffer OverflowCWE-416 — Use After Free31 documents7 sources
Severity
6.1MEDIUM
EPSS
0.0%
top 85.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Vmware Horizon ClientVmware Workstation PlayerVmware Workstation PRO
Timeline
PublishedSep 16
Latest updateMay 24

Description

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:LExploitability: 1.8 | Impact: 4.2

Affected Packages4 packages

▶CVEListV5vmware_workstation_and_horizon_client_for_windowsVMware Workstation (15.x), Horizon Client for Windows (5.x before 5.4.4)
▶NVDvmware/horizon_client5.0.0 — 5.4.4
▶NVDvmware/workstation_pro15.0.0 — 16.0.0
▶NVDvmware/workstation_player15.0.0 — 16.0.0

🔴Vulnerability Details

2
GHSA
GHSA-33qq-wfvm-3749: VMware Workstation (15↗2022-05-24
▶
CVEList
CVE-2020-3987: VMware Workstation (15↗2020-09-16
▶

📋Vendor Advisories

26
VMware
VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities (CVE-2020-3980, CVE-2020-3986, CVE-2020-3987, CVE-2020-3988, CVE-2020-3989, CVE-2020-3990)↗2020-09-14
▶
Red Hat
chromium-browser: Heap buffer overflow in media↗2020-03-31
▶
Red Hat
chromium-browser: Use after free in WebAudio↗2020-03-31
▶
Red Hat
chromium-browser: Use after free in WebGL↗2020-03-18
▶
Red Hat
chromium-browser: Use after free in media↗2020-03-18
▶
CVE-2020-3987 (MEDIUM CVSS 6.1) | VMware Workstation (15.x) and Horiz | cvebase.io