Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2017-4948 | First vendor Publication | 2018-01-05 |
| Vendor | Cve | Last vendor Modification | 2018-01-25 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H | |||
|---|---|---|---|
| Overall CVSS Score | 7.1 | ||
| Base Score | 7.1 | Environmental Score | 7.1 |
| impact SubScore | 5.2 | Temporal Score | 7.1 |
| Exploitabality Sub Score | 1.8 | ||
| Attack Vector | Local | Attack Complexity | Low |
| Privileges Required | Low | User Interaction | None |
| Scope | Unchanged | Confidentiality Impact | High |
| Integrity Impact | None | Availability Impact | High |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:C/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 6.6 | Attack Range | Local |
| Cvss Impact Score | 9.2 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this issue in conjunction with other bugs may allow a View desktop to leak information from host or may allow for a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-4948 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 50 % | CWE-200 | Information Exposure |
| 50 % | CWE-125 | Out-of-bounds Read |
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2018-01-13 | Name : An application installed on the remote MacOS / MacOSX host is affected by a c... File : macos_vmware_tools_vmsa_2018_0003.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 13:02:24 |
|
| 2021-04-22 02:15:26 |
|
| 2020-05-23 02:06:18 |
|
| 2020-05-23 01:00:36 |
|
| 2018-01-25 17:21:51 |
|
| 2018-01-14 09:22:00 |
|
| 2018-01-10 13:23:37 |
|
| 2018-01-08 13:23:12 |
|
| 2018-01-05 17:22:14 |
|
