CVE-2020-3951

Katalog CVE

CVSS 3.8 · Low EPSS 0,27%

Kerentanan Out-of-bounds Write pada vmware horizon client, vmware workstation. Skor CVSS 3.1 3.8 (Low) menurut NVD.

Deskripsi (NVD)

VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint. Attackers with non-administrative access to a guest VM with virtual printing enabled may exploit this issue to create a denial-of-service condition of the Thinprint service running on the system where Workstation or Horizon Client is installed.

Rincian

Terbit di NVD

17 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.8 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 18,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vmware.com/security/advisories/VMSA-2020-0005.html advisory vendor