CVE-2016-7084

tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via a JPEG 2000 image.

Published: Dec 29, 2016
Updated: Apr 13, 2023
CVE: CVE-2016-7084
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v2:

Severity: Medium
Score: 6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C

CWEs:

CWE-119

Affected Software
References

Software	From	Fixed in
vmware / workstation_player	12.0.0	12.0.0.x
vmware / workstation_player	12.0.1	12.0.1.x
vmware / workstation_player	12.1.0	12.1.0.x
vmware / workstation_player	12.1.1	12.1.1.x
vmware / workstation_pro	12.0.0	12.0.0.x
vmware / workstation_pro	12.0.1	12.0.1.x
vmware / workstation_pro	12.1.0	12.1.0.x
vmware / workstation_pro	12.1.1	12.1.1.x

http://www.securityfocus.com/bid/92934
http://www.securitytracker.com/id/1036805
http://www.vmware.com/security/advisories/VMSA-2016-0014.html
https://www.exploit-db.com/exploits/40399/

Vulnerability Database

289,599

CVE-2016-7084