PT-2019-13035 · Bluestacks · Bluestacks App Player

Published 2019-06-23 · Updated 2019-10-09 · CVE-2019-12936

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BlueStacks App Player versions 2 through 4 before 4.90

Description The issue allows for DNS Rebinding attacks, which can be used to target exposed IPC functions.

Recommendations For BlueStacks App Player versions 2 through 4 before 4.90, update to version 4.90 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-12936

Affected Products

Bluestacks App Player

References · 4

• https://support.bluestacks.com/hc/en-us/articles/360028842471 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12936 · Vendor Advisory
• https://support.bluestacks.com/hc/en-us/articles/360021469391-Release-Notes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12936 · Security Note