CVE-2019-5539
High
Description
VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4) contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a Windows machine where Workstation or View Agent is installed.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Vmware Horizon View Agent
PublishedDec 23, 2019
First seenDec 23, 2019
How to fix
Update
- vmware horizon_view_agent7.5.4, 7.10.1 or later
- vmware workstation15.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware horizon_view_agent | 7.5.0 ≤ v < 7.5.4, 7.10.0 ≤ v < 7.10.1 | 7.5.4, 7.10.1 |
| vmware workstation | 15.0.0 ≤ v < 15.5.1 | 15.5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.