CVE-2017-4918 : Security Advisory and Response

VMware Horizon View Client for Mac versions 2.x, 3.x, and 4.x prior to 4.5.0 is vulnerable to a command injection issue that could allow privilege escalation on Mac OSX systems.

Understanding CVE-2017-4918

This CVE involves a vulnerability in the service startup script of VMware Horizon View Client for Mac, potentially enabling users with low privileges to elevate to root access.

What is CVE-2017-4918?

The vulnerability in VMware Horizon View Client for Mac versions 2.x, 3.x, and 4.x prior to 4.5.0 allows unauthorized users to execute arbitrary commands, leading to potential privilege escalation on the host system.

The Impact of CVE-2017-4918

Exploitation of this vulnerability could result in unauthorized users gaining root access on Mac OSX systems where the affected client is installed, posing a significant security risk.

Technical Details of CVE-2017-4918

This section provides detailed technical information about the CVE.

Vulnerability Description

The service startup script of VMware Horizon View Client for Mac versions 2.x, 3.x, and 4.x prior to 4.5.0 contains a command injection vulnerability, allowing attackers to execute commands with elevated privileges.

Affected Systems and Versions

Product: Horizon View Client for Mac
Vendor: VMware
Affected Versions: 2.x, 3.x, 4.x prior to 4.5.0

Exploitation Mechanism

Attackers can exploit this vulnerability by injecting malicious commands into the service startup script, potentially leading to unauthorized privilege escalation.

Mitigation and Prevention

Protecting systems from CVE-2017-4918 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update VMware Horizon View Client to version 4.5.0 or later to mitigate the vulnerability.
Monitor system logs for any suspicious activities that could indicate exploitation attempts.

Long-Term Security Practices

Implement the principle of least privilege to restrict user access and limit potential damage from privilege escalation attacks.
Regularly update and patch software to address known vulnerabilities and enhance overall system security.
Conduct security audits and penetration testing to identify and remediate potential security weaknesses.

Patching and Updates

Ensure timely installation of security patches and updates provided by VMware to address vulnerabilities like CVE-2017-4918.