PT-2020-3950 · Cortado+1 · Cortado Thinprint+2

Published 2020-09-14 · Updated 2020-11-17 · CVE-2020-3989

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 15.x Horizon Client for Windows versions 5.x before 5.4.4

Description: The issue is related to an out-of-bounds write in the Cortado ThinPrint component, which can lead to a denial of service condition. A malicious actor with normal access to a virtual machine may exploit this to create a partial denial-of-service condition on the system where the software is installed. Exploitation is only possible if virtual printing has been enabled, a feature that is not enabled by default on Workstation but is enabled by default on Horizon Client for Windows.

Recommendations: For VMware Workstation version 15.x, update to a version where this issue is fixed. For Horizon Client for Windows versions 5.x before 5.4.4, update to version 5.4.4 or later. As a temporary workaround, consider disabling virtual printing until a patch is available.

Fix

DoS

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2020-04343

CVE-2020-3989

ZDI-20-1177

Affected Products

Cortado Thinprint

Horizon Client For Windows

Vmware Workstation

References · 6

• https://vmware.com/security/advisories/VMSA-2020-0020.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3989 · Security Note
• https://bdu.fstec.ru/vul/2020-04343 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-1177 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3989 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2020091633 · Note