CVE-2016-4288 A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary prog...
HighCVSS 8.4
EPSS 0.60%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bluestacks | = 2.1.3.5650 | No fix listed |
| bluestacks App Player | = 2.1.3.5650 | No fix listed |
References
- www.talosintelligence.com exploit mitigation technical-description third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry