high7.8Public exploit code
CVE-2019-5526
VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware Workstation 15.1.0 - DLL Hijacking2019-05-16 · local · windows · Verified
Impact
VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workstation | from 15.0.0 before 15.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html
- http://www.securityfocus.com/bid/108333
- https://www.vmware.com/security/advisories/VMSA-2019-0007.html
- http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html
- http://www.securityfocus.com/bid/108333
- https://www.vmware.com/security/advisories/VMSA-2019-0007.html