CVE-2017-4897 | BDVDB-2026-86009 Detail

Description#

VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this vulnerability requires a victim to download a specially crafted RDP file through DaaS client by clicking on a malicious link.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-05-31Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.