VMware Workstation CVE-2019-5526 DLL Loading Remote Code Execution Vulnerability

Bugtraq ID:	108333
Class:	Design Error
CVE:	CVE-2019-5526
Remote:	Yes
Local:	No
Published:	May 14 2019 12:00AM
Updated:	May 14 2019 12:00AM
Credit:	Boris Ryutin, Miguel Méndez Zúñiga and Claudio Cortés Cid.
Vulnerable:	VMWare Workstation Pro 15.0.3 VMWare Workstation Pro 15.0.1 VMWare Workstation Pro 15.0 VMWare Workstation Player 15.0.3 VMWare Workstation Player 15.0.1 VMWare Workstation Player 15.0 VMWare Workstation 15.0.4 VMWare Workstation 15.0.3 VMWare Workstation 15.0.2 VMWare Workstation 15.0.1 VMWare Workstation 15.0
Not Vulnerable:	VMWare Workstation Pro 15.1 VMWare Workstation Player 15.1 VMWare Workstation 15.1

VMware Workstation CVE-2019-5526 DLL Loading Remote Code Execution Vulnerability

VMware Workstation is prone to a remote code-execution vulnerability.

A remote attacker can leverage this issue to execute arbitrary code with administrator privileges. Failed exploit attempts will result in a denial of service condition.

VMware Workstation CVE-2019-5526 DLL Loading Remote Code Execution Vulnerability

A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.

VMware Workstation CVE-2019-5526 DLL Loading Remote Code Execution Vulnerability

References:

• Application DLL Load Hijacking (HD Moore)
  
• Exploiting DLL Hijacking Flaws (hdm)
  
• More information about the DLL Preloading remote attack vector (Microsoft)
  
• VMware Homepage (VMware)
  
• VMSA-2019-0007: VMware Workstation update addresses a DLL-hijacking issue (CVE-2 (VMware)