Описание
VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp installed on it.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitMailing ListTechnical DescriptionThird Party Advisory
- PatchVendor Advisory
- ExploitThird Party AdvisoryVDB Entry
- ExploitMailing ListTechnical DescriptionThird Party Advisory
- PatchVendor Advisory
Уязвимые конфигурации
EPSS
7.8 High
CVSS3
6.9 Medium
CVSS2
Дефекты
Связанные уязвимости
VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp installed on it.
Уязвимость средства для виртуализации и создания переносимых приложений VMware ThinApp, связанная с небезопасной загрузкой библиотек DLL, позволяющая нарушителю повысить свои привилегии
EPSS
7.8 High
CVSS3
6.9 Medium
CVSS2