What is CVE-2020-3951?

CVE-2020-3951 is a low-severity vulnerability in Microsoft Windows, classified under Out-of-bounds Write. CVSS score: 3.8/10. Published 2020-03-17.

How severe is CVE-2020-3951?

Low severity. CVSS v3 base score is 3.8 out of 10.

Buffer overflow in Microsoft Windows

CVE-2020-3951

VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0) contain a denial-of-service vulnerability due to a heap-overflow issue in Cortado Thinprint. Attackers with non-administrative access to a…

Vulnerability class: Buffer Overflow

EPSS: 0.003 (19.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.8 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L.

Affected products

Microsoft Windows
Vmware Horizon_client
Vmware Workstation
N/a Vmware Workstation And Horizon Client For Windows — versions VMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4.0)

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

security@vmware.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3951?: CVE-2020-3951 is a low-severity vulnerability in Microsoft Windows, classified under Out-of-bounds Write. CVSS score: 3.8/10. Published 2020-03-17.
How severe is CVE-2020-3951?: Low severity. CVSS v3 base score is 3.8 out of 10.