CVE-2017-4918: Command Injection
First published: Thu Jun 08 2017(Updated: )
VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Horizon | =2.0 | |
| VMware Horizon | =2.1 | |
| VMware Horizon | =2.2 | |
| VMware Horizon | =2.3 | |
| VMware Horizon | =3.0 | |
| VMware Horizon | =3.1 | |
| VMware Horizon | =3.2 | |
| VMware Horizon | =3.3 | |
| VMware Horizon | =4.0.0 | |
| VMware Horizon | =4.0.1 | |
| VMware Horizon | =4.1.0 | |
| VMware Horizon | =4.2.0 | |
| VMware Horizon | =4.3.0 | |
| VMware Horizon | =4.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-4918?
The severity of CVE-2017-4918 is classified as high due to its potential for privilege escalation.
How do I fix CVE-2017-4918?
To fix CVE-2017-4918, users should upgrade to VMware Horizon View Client version 4.5.0 or later.
What kind of vulnerability is CVE-2017-4918?
CVE-2017-4918 is a command injection vulnerability that can allow unprivileged users to escalate privileges.
Which versions of VMware Horizon View are affected by CVE-2017-4918?
CVE-2017-4918 affects VMware Horizon View Client versions 2.x, 3.x, and 4.x prior to 4.5.0.
Can CVE-2017-4918 be exploited remotely?
CVE-2017-4918 typically requires local access to the vulnerable system to exploit the command injection vulnerability.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vmware
- canonical/vmware horizon view
- version/vmware horizon view/2.0
- version/vmware horizon view/2.1
- version/vmware horizon view/2.2
- version/vmware horizon view/2.3
- version/vmware horizon view/3.0
- version/vmware horizon view/3.1
- version/vmware horizon view/3.2
- version/vmware horizon view/3.3
- version/vmware horizon view/4.0.0
- version/vmware horizon view/4.0.1
- version/vmware horizon view/4.1.0
- version/vmware horizon view/4.2.0
- version/vmware horizon view/4.3.0
- version/vmware horizon view/4.4.0