Horizon View
Vendor:
First CVE: Dec 29, 2016 · Active for 9 years
14
Total CVEs
More Total CVEs than 91% of tracked products
4.7
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Horizon View over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 29, 2016
9 years ago
Most Recent CVE
Aug 13, 2018
2,905 days ago
CVE Severity & Scoring
Horizon View14 CVEs
14%
71%
14%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local10 (71.4%)
Network4 (28.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (35.7%)
High9 (64.3%)
Unknown0 (0.0%)
User Interaction
None14 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low11 (78.6%)
High0 (0.0%)
None3 (21.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-4918CRITICAL VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may all | Jun 8, 2017 | 9.8 | 35 | NO | NO |
CVE-2017-4907CRITICAL VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may | Jun 8, 2017 | 9.8 | 25 | NO | NO |
CVE-2017-4937HIGH VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On | Nov 17, 2017 | 7.8 | 24 | NO | NO |
CVE-2017-4935HIGH VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On | Nov 17, 2017 | 7.8 | 24 | NO | NO |
CVE-2017-4912HIGH VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueType Font (TTF) parser in the TPVi | Jun 8, 2017 | 7.8 | 24 | NO | NO |
CVE-2017-4911HIGH VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll. On | Jun 8, 2017 | 7.8 | 24 | NO | NO |
CVE-2018-6970MEDIUM VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message | Aug 13, 2018 | 6.5 | 23 | NO | NO |
CVE-2017-4936HIGH VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On | Nov 17, 2017 | 7.8 | 20 | NO | NO |
CVE-2017-4913HIGH VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll. On | Jun 8, 2017 | 7.8 | 20 | NO | NO |
CVE-2017-4910HIGH VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll. On | Jun 8, 2017 | 7.8 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Horizon View
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.0 | 2 | 7.5 | 4.1% | 0 | 0 |
| 6.2.4 | 1 | 9.8 | 3.8% | 0 | 0 |
| 6.2.3 | 1 | 9.8 | 3.8% | 0 | 0 |
| 6.2.2 | 1 | 9.8 | 3.8% | 0 | 0 |
| 6.2.1 | 1 | 9.8 | 3.8% | 0 | 0 |
| 6.2 | 2 | 7.5 | 4.1% | 0 | 0 |
| 6.1.1 | 2 | 7.5 | 4.1% | 0 | 0 |
| 6.1 | 2 | 7.5 | 4.1% | 0 | 0 |
| 6.0.2 | 2 | 7.5 | 4.1% | 0 | 0 |
| 6.0 | 2 | 7.5 | 4.1% | 0 | 0 |
| 5.3 | 1 | 5.3 | 4.4% | 0 | 0 |
| 5.2.0 | 1 | 5.3 | 4.4% | 0 | 0 |
| 5.1.3 | 1 | 5.3 | 4.4% | 0 | 0 |
| 5.1 | 1 | 5.3 | 4.4% | 0 | 0 |
| 5.0.1 | 1 | 5.3 | 4.4% | 0 | 0 |
| 5.0 | 1 | 5.3 | 4.4% | 0 | 0 |
| 4.6 | 3 | 7.8 | 0.4% | 0 | 0 |
| 4.5 | 3 | 7.8 | 0.4% | 0 | 0 |
| 4.4.0 | 1 | 9.8 | 4.9% | 0 | 0 |
| 4.4 | 3 | 7.8 | 0.4% | 0 | 0 |