| Package | Affected versions | Patched versions |
|---|---|---|
| horizon | ≥ 5.0.0, < 5.5.3 | 5.5.3 |
| workstation | ≥ 16.0.0, < 16.2.2 | 16.2.2 |
VMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3) contains a denial-of-service vulnerability in the Cortado ThinPrint component. The issue exists in TrueType font parser. A malicious actor with access to a virtual machine or remote desktop may exploit this issue to trigger a denial-of-service condition in the Thinprint service running on the host machine where VMware Workstation or Horizon Client for Windows is installed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free