CVE-2020-3991

2020-10-1613:15:22

vmware

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at install time. This will result into a denial-of-service condition on the machine where Horizon Client for Windows is installed.

CNA Affected

[
  {
    "product": "VMware Horizon Client for Windows",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Horizon Client for Windows (5.x before 5.5.0)"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2020-0022.html