CVE-2017-4918

Critical

Published: 08/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

VMware Horizon View Client versions 2.x, 3.x, and 4.x prior to 4.5.0 contain a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed.

Risk Assessment

Privilege escalation to root by unprivileged users can lead to serious security breaches, including full control over the system. Organizations should be aware of the risks associated with this vulnerability, especially in environments where VMware Horizon View Client is used.

Recommendation

It is recommended to update VMware Horizon View Client to version 4.5.0 or later to mitigate this vulnerability. Additionally, conducting a user privilege audit and monitoring systems for unauthorized activities is advisable.

Original NVD description (English source)

VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed.