CVE-2017-4907: Buffer Overflow
First published: Thu Jun 08 2017(Updated: )
VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Horizon | =6.0 | |
| VMware Horizon | =6.0.2 | |
| VMware Horizon | =6.1 | |
| VMware Horizon | =6.1.1 | |
| VMware Horizon | =6.2 | |
| VMware Horizon | =6.2.1 | |
| VMware Horizon | =6.2.2 | |
| VMware Horizon | =6.2.3 | |
| VMware Horizon | =6.2.4 | |
| VMware Horizon | =7.0 | |
| VMware Unified Access Gateway | =2.5 | |
| VMware Unified Access Gateway | =2.5.1 | |
| VMware Unified Access Gateway | =2.7 | |
| VMware Unified Access Gateway | =2.7.2 | |
| VMware Unified Access Gateway | =2.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-4907?
CVE-2017-4907 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2017-4907?
To fix CVE-2017-4907, update VMware Unified Access Gateway to version 2.8.1 or later and VMware Horizon View to version 7.1.0 or later.
What products are affected by CVE-2017-4907?
CVE-2017-4907 affects VMware Unified Access Gateway versions 2.5.x, 2.7.x, 2.8.x prior to 2.8.1, and Horizon View versions 6.x prior to 6.2.4 and 7.x prior to 7.1.0.
What type of vulnerability is CVE-2017-4907?
CVE-2017-4907 is classified as a heap buffer-overflow vulnerability.
Can CVE-2017-4907 be exploited remotely?
Yes, CVE-2017-4907 can be exploited remotely, allowing attackers to execute arbitrary code on the affected systems.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/description
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vmware
- canonical/vmware horizon view
- version/vmware horizon view/6.0
- version/vmware horizon view/6.0.2
- version/vmware horizon view/6.1
- version/vmware horizon view/6.1.1
- version/vmware horizon view/6.2
- version/vmware horizon view/6.2.1
- version/vmware horizon view/6.2.2
- version/vmware horizon view/6.2.3
- version/vmware horizon view/6.2.4
- version/vmware horizon view/7.0
- canonical/vmware unified access gateway
- version/vmware unified access gateway/2.5
- version/vmware unified access gateway/2.5.1
- version/vmware unified access gateway/2.7
- version/vmware unified access gateway/2.7.2
- version/vmware unified access gateway/2.8