CVE-2018-6970
Medium
Description
VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privileged process running on a system where Horizon Connection Server, Horizon Agent or Horizon Client are installed. Note: This issue doesn't apply to Horizon 6, 7 Agents installed on Linux systems or Horizon Clients installed on non-Windows systems.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Vmware Horizon Client
PublishedAug 13, 2018
First seenAug 13, 2018
How to fix
Update
- vmware horizon_client4.8.1 or later
- vmware horizon_view6.2.7, 7.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware horizon_client | 4.0.0 ≤ v < 4.8.1 | 4.8.1 |
| vmware horizon_view | 6.0.0 ≤ v < 6.2.7, 7.0.0 ≤ v < 7.5.1 | 6.2.7, 7.5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.