PT-2022-1543 · Vmware · Horizon Client For Windows+1

Gabriel Durdiak · Published 2022-01-18 · Updated 2022-02-04 · CVE-2022-22938

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 16.x prior to 16.2.2 Horizon Client for Windows versions 5.x prior to 5.5.3

Description The issue exists in the TrueType font parser of the Cortado ThinPrint component. A malicious actor with access to a virtual machine or remote desktop may exploit this issue to trigger a denial-of-service condition in the Thinprint service running on the host machine where VMware Workstation or Horizon Client for Windows is installed. The vulnerability is due to insufficient input validation.

Recommendations For VMware Workstation versions 16.x prior to 16.2.2, update to version 16.2.2 or later. For Horizon Client for Windows versions 5.x prior to 5.5.3, update to version 5.5.3 or later. As a temporary workaround, consider disabling the Cortado ThinPrint component until a patch is available. Restrict access to the TrueType font parser to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-00748

CVE-2022-22938

Affected Products

Horizon Client For Windows

Vmware Workstation

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-22938 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22938 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00748 · Security Note
• https://vmware.com/security/advisories/VMSA-2022-0002.html · Vendor Advisory
• https://t.me/cibsecurity/36485 · Telegram Post
• https://t.me/cvenotify/26263 · Telegram Post