CVEvulnerability

CVE-2017-4918

9.8 CRITICAL Published 2017-06-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-06-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-77

Description

VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed.

Affected configurations

• vmware horizon view 2.0 • vmware horizon view 2.1 • vmware horizon view 2.2 • vmware horizon view 2.3 • vmware horizon view 3.0 • vmware horizon view 3.1 • vmware horizon view 3.2 • vmware horizon view 3.3 • vmware horizon view 4.0.0 • vmware horizon view 4.0.1 • vmware horizon view 4.1.0 • vmware horizon view 4.2.0 • vmware horizon view 4.3.0 • vmware horizon view 4.4.0

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References