Lucene search

MitreCVE-2022-48077

HistoryFeb 13, 2023 - 5:15 p.m.

CVE-2022-48077

2023-02-1317:15:11

CWE-427

mitre

web.nvd.nist.gov

genymotion desktop

v3.3.2

dll hijacking

vulnerability

privilege escalation

arbitrary code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

33.5%

JSON

Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.

Affected configurations

Nvd

Node

genymotiongenymotion_desktopMatch3.3.2

VendorProductVersionCPE
genymotiongenymotion_desktop3.3.2cpe:2.3:a:genymotion:genymotion_desktop:3.3.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
genymotion	genymotion_desktop	3.3.2	cpe:2.3:a:genymotion:genymotion_desktop:3.3.2:::::::*

References

gist.github.com/hax3xploit/3210813c7221f3ae505494da57f26cbc

github.com/hax3xploit/CVEs/blob/master/GenymotionDesktop.md

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

33.5%

JSON

Related for CVE-2022-48077