Vulnerability · Published Oct 16, 2020 · Assigned by vmware
CVE-2020-3991
High 7.1
In plain English
A high-severity security flaw in VMware Horizon Client for Windows. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS NVD)7.1High
Exploit odds (30 days)0.3%top 72.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at install time. This will result into a denial-of-service condition on the machine where Horizon Client for Windows is installed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | VMware Horizon Client for Windows | VMware Horizon Client for Windows (5.x before 5.5.0) |
References
- https://www.vmware.com/security/advisories/VMSA-2020-0022.html x_refsource_MISC