CVE-2017-4937 - CVE House

Back to Database

Status published High CVE-2017-4937

VMware Workstation (12.x before 12.5.8) and Horizon View Client for...

7.8 CVSS

Vulnerability Description

VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View Client.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-4937

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from VMware

View All →

Spring Framework STOMP CSRF Vulnerability

Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables

Username enumeration vulnerability

Header injection vulnerability

CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

Affected Vendor

VMware

View all reports →

Affected Software

Workstation, Horizon View Client for Windows

Vulnerable Versions:

12.x before 12.5.8, 4.x before 4.6.1

Timeline

Official Publish: November 17th, 2017

Last Modified: September 16th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.