CVE-2020-3989: 
VMware Workstation Player vulnerability analysis and mitigation

CVE-2020-3989 is a denial-of-service vulnerability discovered in VMware Workstation and Horizon Client for Windows, specifically affecting the Cortado ThinPrint component. The vulnerability was disclosed on September 14, 2020, and affects VMware Workstation 15.x on Windows and Horizon Client for Windows 5.x and prior versions (VMware Advisory).

The vulnerability stems from an out-of-bounds write issue in the Cortado ThinPrint component. VMware has evaluated this vulnerability with a CVSSv3 base score of 3.8, categorizing it in the Low severity range. The specific flaw exists within the ThinPrint component, where crafted data in the name table of a font file can result in an integer overflow before writing to memory (Zero Day Initiative).

When exploited, this vulnerability can create a partial denial-of-service condition on the system where VMware Workstation or Horizon Client for Windows is installed. The impact is limited to systems where virtual printing has been enabled, which is not enabled by default on Workstation but is enabled by default on Horizon Client (VMware Advisory).

VMware has released patches to address this vulnerability. Users should upgrade to VMware Workstation version 15.5.7 for Windows systems and VMware Horizon Client version 5.4.4 for Windows. No workarounds are available for this vulnerability, making patch installation the only remediation option (VMware Advisory).