CVE-2015-2338: Medium severity vmware horizon vulnerability
TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a host OS denial of service via unspecified vectors, a different vulnerability than CVE-2015-2339.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2338?
CVE-2015-2338 has a medium severity rating due to improper memory allocation in VMware products.
How do I fix CVE-2015-2338?
To fix CVE-2015-2338, upgrade to the latest version of VMware Workstation, Player, or Horizon Client that addresses this vulnerability.
Which VMware products are affected by CVE-2015-2338?
CVE-2015-2338 affects VMware Workstation 10.x before 10.0.6, 11.x before 11.1.1, Player 6.x before 6.0.6, 7.x before 7.1.1, and Horizon Client versions prior to 3.2.1 and 5.4.2.
Can CVE-2015-2338 be exploited remotely?
CVE-2015-2338 primarily requires local access to exploit, as it affects the memory allocation for the guest OS.
What are the potential impacts of CVE-2015-2338?
Exploitation of CVE-2015-2338 could lead to a denial of service or potential arbitrary code execution on the affected VMware applications.