PT-2020-4395

CVE-2020-3991

·

Published

2020-10-15

·

Updated

2020-10-23

Description by

CVSS 3.1
7.1
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions: VMware Horizon Client for Windows versions 5.x before 5.5.0
Description: The issue is related to a denial-of-service condition due to a file system access control problem during installation. It may allow an attacker to overwrite certain admin privileged files through a symbolic link attack, resulting in a denial-of-service condition on the machine where the client is installed. The vulnerability is also associated with insufficient input validation.
Recommendations: For versions 5.x before 5.5.0, update to version 5.5.0 or later to resolve the issue. As a temporary workaround, consider restricting file system access during installation to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾