Vulnerability identifier: #VU14221

Vulnerability risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2018-6970

CWE-ID: CWE-125

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
VMware Horizon
Server applications / Virtualization software

Vendor: VMware, Inc

Description

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists due to out-of-bounds read in the Message Framework library. A local attacker can obtain data from a privileged process running on a system where Horizon Connection Server, Horizon Agent or Horizon Client are installed.

Mitigation
The vulnerability has been addressed in the versions 4.8.1, 6.2.7, 7.5.1.

Vulnerable software versions

VMware Horizon: 4.8.0, 4.7.0, 4.6.1, 4.5.0, 6.2 - 6.2.4, 6.0 - 6.0.2, 6.1 - 6.1.1, 7.5, 7.4, 7.3.2, 7.1, 7.0 - 7.0.3, 7.2

---

External links
http://www.vmware.com/security/advisories/VMSA-2018-0019.html

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.