CVE-2016-7084

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2016-12-29 · updated 2026-06-17
Weakness: CWE-119

Description

tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via a JPEG 2000 image.

Affected products

VMware Workstation Player: 12.0.0, 12.0.1, 12.1.0, 12.1.1
VMware Workstation Pro: 12.0.0, 12.0.1, 12.1.0, 12.1.1

References

http://www.securityfocus.com/bid/92934
http://www.securitytracker.com/id/1036805
http://www.vmware.com/security/advisories/VMSA-2016-0014.html
https://www.exploit-db.com/exploits/40399/
http://www.securityfocus.com/bid/92934
http://www.securitytracker.com/id/1036805
http://www.vmware.com/security/advisories/VMSA-2016-0014.html
https://www.exploit-db.com/exploits/40399/

Get alerted when CVE-2016-7084 or the next vulnerability affects your stack