CVE-2017-4918

VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script

published June 8, 2017

CVSS
โ€”
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

โšก A command injection flaw in VMware Horizon View Client could let unprivileged users escalate their privileges to root โ€” the ultimate backstage pass on Mac OSX! ๐Ÿ”ฅ Think of it like a restaurant where a diner manages to sneak behind the counter and start cooking โ€” they could whip up something that wasn't on the menu without anyone stopping them. This vulnerability allows someone to gain root access just like that sneaky chef! If exploited, an attacker could gain complete control over the system, leading to unauthorized access to data and potentially devastating system changes. Imagine a guest not only getting into the kitchen but also fiddling with the secret sauce recipe โ€” chaos ensues!

Put simply

Think of it like a restaurant where a diner manages to sneak behind the counter and start cooking โ€” they could whip up something that wasn't on the menu without anyone stopping them. This vulnerability allows someone to gain root access just like that sneaky chef! This vulnerability in VMware Horizon View Client allows command injection during the service startup script, enabling unprivileged users to execute arbitrary commands with root privileges on Mac OSX systems.

What to do

If exploited, an attacker could gain complete control over the system, leading to unauthorized access to data and potentially devastating system changes. Imagine a guest not only getting into the kitchen but also fiddling with the secret sauce recipe โ€” chaos ensues! Update VMware Horizon View Client to version 4.5.0 or higher immediately to close this vulnerability. It's essential to regularly monitor and apply updates to software to mitigate risks. ๐Ÿš€ You've got this! Tackle this vulnerability, secure your systems, and feel like the security hero you are! ๐Ÿฆธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04859 ยท 92.0th percentile
Published
2017-06-08T19:00Z
EPSS history
Timeline
  • 08 JUN 19:00Z
    VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script
    cvelistv5