VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.
References
Link | Resource |
---|---|
https://www.vmware.com/security/advisories/VMSA-2021-0009.html | Patch Vendor Advisory |
https://www.zerodayinitiative.com/advisories/ZDI-21-610/ | Third Party Advisory VDB Entry |
Configurations
History
04 Jun 2021, 19:27
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:*:*:* cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* |
|
CWE | CWE-125 | |
References | (MISC) https://www.vmware.com/security/advisories/VMSA-2021-0009.html - Patch, Vendor Advisory | |
References | (MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-610/ - Third Party Advisory, VDB Entry | |
CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 6.5 |
25 May 2021, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
24 May 2021, 12:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-05-24 12:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-21989
Mitre link : CVE-2021-21989
CVE.ORG link : CVE-2021-21989
JSON object : View
Products Affected
microsoft
- windows
vmware
- horizon_client
- workstation
CWE
CWE-125
Out-of-bounds Read