PT-2019-1682 · Vmware · Vmware Workstation

Publicado 2019-03-14 · Atualizado 2020-08-24 · CVE-2019-5512

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x before 15.0.3 VMware Workstation versions 14.x before 14.1.6

Description The issue is related to the handling of COM classes by VMware Workstation on Windows, which may allow hijacking of COM classes used by the VMX process. This could lead to elevation of privilege on a Windows host. The vulnerability is associated with insufficient protection mechanisms when processing COM classes.

Recommendations For versions 15.x before 15.0.3, update to version 15.0.3 or later. For versions 14.x before 14.1.6, update to version 14.1.6 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

BDU:2019-01275

CVE-2019-5512

Produtos afetados

Vmware Workstation

Referências · 5

• 🔥 https://exploit-db.com/exploits/46601 · Exploit
• https://vmware.com/security/advisories/VMSA-2019-0002.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01275 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-5512 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5512 · Aviso do Fabricante