CVE-2017-4948

VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this issue in conjunction with other bugs may allow a View desktop to leak information from host or may allow for a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View.

• CWE-125
• CWE-200

• http://www.securityfocus.com/bid/102441Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040108Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040109Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040136Third Party Advisory, VDB Entry
• https://www.vmware.com/us/security/advisories/VMSA-2018-0003.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/102441Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040108Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040109Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040136Third Party Advisory, VDB Entry
• https://www.vmware.com/us/security/advisories/VMSA-2018-0003.htmlPatch, Vendor Advisory

Published

Jan 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-4941VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-20…8.8
• CVE-2017-4942VMware AirWatch Console (AWC) contains a Broken Access Contr…4.9
• CVE-2017-4943VMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) …
• CVE-2017-4945VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x)…
• CVE-2017-4946The VMware V4H and V4PA desktop agents (6.x before 6.5.1) co…
• CVE-2017-4947VMware vRealize Automation (7.3 and 7.2) and vSphere Integra…
• CVE-2017-4949VMware Workstation and Fusion contain a use-after-free vulne…
• CVE-2017-4950VMware Workstation and Fusion contain an integer overflow vu…
• CVE-2017-4951VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before…
• CVE-2017-4952VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2…
• CVE-2017-4955An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x…
• CVE-2017-4956Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…