PT-2019-13035 · Bluestacks · Bluestacks App Player

Publicado 2019-06-23 · Atualizado 2019-10-09 · CVE-2019-12936

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BlueStacks App Player versions 2 through 4 before 4.90

Description The issue allows for DNS Rebinding attacks, which can be used to target exposed IPC functions.

Recommendations For BlueStacks App Player versions 2 through 4 before 4.90, update to version 4.90 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-12936

Produtos afetados

Bluestacks App Player

Referências · 4

• https://support.bluestacks.com/hc/en-us/articles/360028842471 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-12936 · Aviso do Fabricante
• https://support.bluestacks.com/hc/en-us/articles/360021469391-Release-Notes · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12936 · Nota de Segurança