CVE-2019-5539
First published: Mon Dec 23 2019(Updated: )
VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4) contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a Windows machine where Workstation or View Agent is installed.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Vmware Horizon View Agent | >=7.5.0<7.5.4 | |
| Vmware Horizon View Agent | >=7.10.0<7.10.1 | |
| VMware Workstation | >=15.0.0<15.5.1 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-5539?
CVE-2019-5539 is a DLL hijacking vulnerability found in VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4).
How severe is CVE-2019-5539?
CVE-2019-5539 has a severity rating of 7.8, which is classified as high.
What is the affected software for CVE-2019-5539?
The affected software for CVE-2019-5539 includes VMware Workstation (version 15.x prior to 15.5.1) and Horizon View Agent (version 7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4).
What is the impact of CVE-2019-5539?
CVE-2019-5539 allows attackers with normal user privileges to escalate their privileges.
How can I fix CVE-2019-5539?
To fix CVE-2019-5539, users should update their VMware Workstation to version 15.5.1 or later, and update their Horizon View Agent to version 7.10.1 or later for 7.10.x, or 7.5.4 or later for 7.5.x.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- vendor/vmware
- canonical/vmware horizon view agent
- version/vmware horizon view agent/7.5.0
- version/vmware horizon view agent/7.10.0
- canonical/vmware workstation
- version/vmware workstation/15.0.0
- vendor/microsoft
- canonical/microsoft windows