CVE-2019-5522
published 2019-06-06CVE-2019-5522: VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. This…
PriorityP429high7.1CVSS 3.0
AVLACLPRLUINSUCHINAH
EPSS
0.50%
39.5th percentile
VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. This issue is present in versions 10.2.x and 10.3.x prior to 10.3.10. A local attacker with non-administrative access to a Windows guest with VMware Tools installed may be able to leak kernel information or create a denial of service attack on the same Windows guest machine.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | tools | >= 10.0.0 < 10.3.10 | 10.3.10 |
| vmware | vmware_tools_for_windows | — | — |
CVSS provenance
nvdv3.07.1HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
nvdv2.03.6LOWAV:L/AC:L/Au:N/C:P/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware Tools and Workstation updates address out of bounds read and use-after-free vulnerabilities. (CVE-2019-5522, CVE-2019-5525)
vendor_vmware·2019-06-06·CVSS 7.1
CVE-2019-5522 [HIGH] VMware Tools and Workstation updates address out of bounds read and use-after-free vulnerabilities. (CVE-2019-5522, CVE-2019-5525)
VMSA-2019-0009: VMware Tools and Workstation updates address out of bounds read and use-after-free vulnerabilities. (CVE-2019-5522, CVE-2019-5525)
| Advisory Severity | Important | CVSSv3 Range | 7.1-8.5 | Synopsis | VMware Tools and Workstation updates address out of bounds read and use-after-free vulnerabilities. (CVE-2019-5522, CVE-2019-5525) | Issue Date | 2019-06-06 | Updated On | 2019-06-06 (Initial Advisory) | CVE(s) | CVE-2019-5522, CVE-2019-5525 VMware Tools for Windows (VMware Tools) VMware Workstation Pro / Player for Linux (Workstation)
CVEs: CVE-2019-5522, CVE-2019-5525
Affected products: VMware Tools, VMware Workstation, Workstation Player, Workstation Pro
GHSA
GHSA-4wg2-q996-p3jp: VMware Tools for Windows (10
ghsa_unreviewed·2022-05-24
CVE-2019-5522 [HIGH] CWE-125 GHSA-4wg2-q996-p3jp: VMware Tools for Windows (10
VMware Tools for Windows (10.x before 10.3.10) update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. A local attacker with non-administrative access to a Windows guest with VMware Tools installed may be able to leak kernel information or create a denial of service attack on the same Windows guest machine.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-06-06
Published