CVE-2017-4907 VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may allow a remote attac...
CriticalCVSS 9.8
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware horizon view | = 6.0 | No fix listed |
| VMware horizon view | = 6.0.2 | No fix listed |
| VMware horizon view | = 6.1 | No fix listed |
| VMware horizon view | = 6.1.1 | No fix listed |
| VMware horizon view | = 6.2 | No fix listed |
| VMware horizon view | = 6.2.1 | No fix listed |
| VMware horizon view | = 6.2.2 | No fix listed |
| VMware horizon view | = 6.2.3 | No fix listed |
| VMware horizon view | = 6.2.4 | No fix listed |
| VMware horizon view | = 7.0 | No fix listed |
| VMware unified access gateway | = 2.5 | No fix listed |
| VMware unified access gateway | = 2.5.1 | No fix listed |
| VMware unified access gateway | = 2.7 | No fix listed |
| VMware unified access gateway | = 2.7.2 | No fix listed |
| VMware unified access gateway | = 2.8 | No fix listed |
| VMware unified access gateway | = 2.5.x | No fix listed |
| VMware unified access gateway | = 2.7.x | No fix listed |
| VMware unified access gateway | = 2.8.x prior to 2.8.1 | No fix listed |
| VMware horizon view | = 7.x prior to 7.1.0 | No fix listed |
| VMware horizon view | = 6.x prior to 6.2.4 | No fix listed |
References
- 97914 third-party-advisory vdb-entry
- 1038281 vdb-entry
- www.vmware.com vendor-advisory