CVE-2017-4918: Command Injection
VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-4918?
The severity of CVE-2017-4918 is classified as high due to its potential for privilege escalation.
How do I fix CVE-2017-4918?
To fix CVE-2017-4918, users should upgrade to VMware Horizon View Client version 4.5.0 or later.
What kind of vulnerability is CVE-2017-4918?
CVE-2017-4918 is a command injection vulnerability that can allow unprivileged users to escalate privileges.
Which versions of VMware Horizon View are affected by CVE-2017-4918?
CVE-2017-4918 affects VMware Horizon View Client versions 2.x, 3.x, and 4.x prior to 4.5.0.
Can CVE-2017-4918 be exploited remotely?
CVE-2017-4918 typically requires local access to the vulnerable system to exploit the command injection vulnerability.