PT-2019-17726 · Cortado+2 · Cortado Thinprint+3

Published 2019-12-23 · Updated 2021-07-21 · CVE-2019-5539

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x prior to 15.5.1 Horizon View Agent versions 7.10.x prior to 7.10.1 Horizon View Agent versions 7.5.x prior to 7.5.4

Description The issue is due to insecure loading of a DLL by Cortado Thinprint, which may allow attackers with normal user privileges to escalate their privileges to administrator on a Windows machine.

Recommendations For VMware Workstation versions 15.x prior to 15.5.1, update to version 15.5.1 or later. For Horizon View Agent versions 7.10.x prior to 7.10.1, update to version 7.10.1 or later. For Horizon View Agent versions 7.5.x prior to 7.5.4, update to version 7.5.4 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2019-5539

Affected Products

Cortado Thinprint

Horizon View Agent

Vmware Workstation

Windows

References · 3

• https://osv.dev/vulnerability/CVE-2019-5539 · Vendor Advisory
• https://vmware.com/security/advisories/VMSA-2019-0023.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5539 · Security Note