2 lines
5.2 KiB
JSON
2 lines
5.2 KiB
JSON
{"affected":[{"affectedData":[{"product":"Unified Access Gateway","vendor":"VMware","versions":[{"status":"affected","version":"2.5.x"},{"status":"affected","version":"2.7.x"},{"status":"affected","version":"2.8.x prior to 2.8.1"}]},{"product":"Horizon View","vendor":"VMware","versions":[{"status":"affected","version":"7.x prior to 7.1.0"},{"status":"affected","version":"6.x prior to 6.2.4"}]}],"source":"security@vmware.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:vmware:horizon_view:6.0:*:*:*:*:*:*:*","matchCriteriaId":"370FCB86-72ED-47AB-A414-A12E6C970BE6","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:horizon_view:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67EA006A-76A5-489E-BD3E-FAFC00AB63C0","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:horizon_view:6.1:*:*:*:*:*:*:*","matchCriteriaId":"75798329-EAC2-4B6F-A943-9EB6F01B5145","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:horizon_view:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F0DEE3EA-30C8-4653-96B3-17D9F66AFDA2","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:horizon_view:6.2:*:*:*:*:*:*:*","matchCriteriaId":"A4C7C278-5A1D-41A3-AEFB-10AA859DEF15","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:horizon_view:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"155B09B1-D94A-42C6-89DE-76180968C5D2","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:horizon_view:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"32840997-8DA1-481A-BC2B-6A5D3335826D","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:horizon_view:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5252980E-77DE-41C9-B829-775BB929FB30","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:horizon_view:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9AB3A1FE-4DB8-4536-B94F-21C4560D7BC1","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:horizon_view:7.0:*:*:*:*:*:*:*","matchCriteriaId":"EA685CC7-AD8E-4EB6-A6B7-46F126BDE92E","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:vmware:unified_access_gateway:2.5:*:*:*:*:*:*:*","matchCriteriaId":"14D2DF40-13F6-4A11-B96B-002039F16C0E","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:unified_access_gateway:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DE4B7AA9-E5F1-4388-A083-D1817EE8FA51","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:unified_access_gateway:2.7:*:*:*:*:*:*:*","matchCriteriaId":"3EAAC0B8-C653-40F3-B2E9-7C5DED57E81D","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:unified_access_gateway:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"B5AFC21D-88E4-4AF0-9DA2-17DCBEE12D85","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:unified_access_gateway:2.8:*:*:*:*:*:*:*","matchCriteriaId":"C68F416E-BD1C-4D9F-B3E9-BB05EB421216","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-overflow vulnerability which may allow a remote attacker to execute code on the security gateway."},{"lang":"es","value":"Unified Access Gateway (versiones 2.5.x, 2.7.x, 2.8.x anteriores a 2.8.1) y Horizon View (versiones 7.x anteriores a 7.1.0, versiones 6.x anteriores a 6.2.4) de VMware, contienen una vulnerabilidad de desbordamiento de búfer de la pila que puede permitir a un atacante remoto ejecutar código en la puerta de enlace de seguridad."}],"id":"CVE-2017-4907","lastModified":"2026-06-17T01:19:32.273","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-06-08T13:29:00.220","references":[{"source":"security@vmware.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97914"},{"source":"security@vmware.com","url":"http://www.securitytracker.com/id/1038281"},{"source":"security@vmware.com","tags":["Vendor Advisory"],"url":"http://www.vmware.com/security/advisories/VMSA-2017-0008.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97914"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securitytracker.com/id/1038281"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"http://www.vmware.com/security/advisories/VMSA-2017-0008.html"}],"sourceIdentifier":"security@vmware.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-119"}],"source":"nvd@nist.gov","type":"Primary"}]}
|