Multiple VMware Products CVE-2019-5518 Out of Bounds Read Write Local Code Execution Vulnerability
BID:107541
CVE-2019-5518 |Info
Multiple VMware Products CVE-2019-5518 Out of Bounds Read Write Local Code Execution Vulnerability
| Bugtraq ID: | 107541 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2019-5518 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 21 2019 12:00AM |
| Updated: | May 10 2019 05:00AM |
| Credit: | Fluoroacetate duo of Amat Cama and Richard Zhu |
| Vulnerable: |
VMWare Workstation 15.0.3 VMWare Workstation 15.0.2 VMWare Workstation 15.0.1 VMWare Workstation 14.1.6 VMWare Workstation 14.1.5 VMWare Workstation 14.1.4 VMWare Workstation 14.1.3 VMWare Workstation 14.1.1 VMWare Workstation 14.1 VMWare Workstation 15.0 VMWare Workstation 14.1.2 VMWare Workstation 14.0 VMWare Fusion 11.0.2 VMWare Fusion 11.0.1 VMWare Fusion 10.1.5 VMWare Fusion 10.1.4 VMWare Fusion 10.1.3 VMWare Fusion 10.1.2 VMWare Fusion 10.1.1 VMWare Fusion 11.0 VMWare Fusion 10.1 VMWare Fusion 10.0 VMWare Esxi 6.7 VMWare Esxi 6.5 VMWare Esxi 6.0 |
| Not Vulnerable: |
VMWare Workstation 15.0.4 VMWare Workstation 14.1.7 VMWare Fusion 11.0.3 VMWare Fusion 10.1.6 VMWare Esxi 6.7 ESXi670-20190300 VMWare Esxi 6.5 ESXi650-20190300 VMWare Esxi 6.0 ESXi600-20190300 |
Discussion
Multiple VMware Products CVE-2019-5518 Out of Bounds Read Write Local Code Execution Vulnerability
Multiple VMware products are prone to a local code-execution vulnerability.
Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.
Multiple VMware products are prone to a local code-execution vulnerability.
Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.
Exploit / POC
Multiple VMware Products CVE-2019-5518 Out of Bounds Read Write Local Code Execution Vulnerability
Exploitation of this issue was demonstrated at the Pwn2own contest, but the exploit is not publicly available.
Exploitation of this issue was demonstrated at the Pwn2own contest, but the exploit is not publicly available.
Solution / Fix
Multiple VMware Products CVE-2019-5518 Out of Bounds Read Write Local Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple VMware Products CVE-2019-5518 Out of Bounds Read Write Local Code Execution Vulnerability
References:
References: