PT-2019-1682 · Vmware · Vmware Workstation

Published 2019-03-14 · Updated 2020-08-24 · CVE-2019-5512

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x before 15.0.3 VMware Workstation versions 14.x before 14.1.6

Description The issue is related to the handling of COM classes by VMware Workstation on Windows, which may allow hijacking of COM classes used by the VMX process. This could lead to elevation of privilege on a Windows host. The vulnerability is associated with insufficient protection mechanisms when processing COM classes.

Recommendations For versions 15.x before 15.0.3, update to version 15.0.3 or later. For versions 14.x before 14.1.6, update to version 14.1.6 or later.

Exploit

Fix

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2019-01275

CVE-2019-5512

Affected Products

Vmware Workstation

References · 5

• 🔥 https://exploit-db.com/exploits/46601 · Exploit
• https://vmware.com/security/advisories/VMSA-2019-0002.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01275 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-5512 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5512 · Vendor Advisory