PT-2019-17726 · Cortado+2 · Cortado Thinprint+3

Publicado 2019-12-23 · Atualizado 2021-07-21 · CVE-2019-5539

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x prior to 15.5.1 Horizon View Agent versions 7.10.x prior to 7.10.1 Horizon View Agent versions 7.5.x prior to 7.5.4

Description The issue is due to insecure loading of a DLL by Cortado Thinprint, which may allow attackers with normal user privileges to escalate their privileges to administrator on a Windows machine.

Recommendations For VMware Workstation versions 15.x prior to 15.5.1, update to version 15.5.1 or later. For Horizon View Agent versions 7.10.x prior to 7.10.1, update to version 7.10.1 or later. For Horizon View Agent versions 7.5.x prior to 7.5.4, update to version 7.5.4 or later.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-5539

Produtos afetados

Cortado Thinprint

Horizon View Agent

Vmware Workstation

Windows

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-5539 · Aviso do Fabricante
• https://vmware.com/security/advisories/VMSA-2019-0023.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5539 · Nota de Segurança