CVE-2016-4288 Privilege escalation in App Player

High 8.4 Published 6 Jan 2017 Updated 6 Aug 2024

Local attackers can escalate privileges to SYSTEM by exploiting weak registry permissions created by the BlueStacks App Player installer.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2016-4288?

CVE-2016-4288 is a high-severity vulnerability in BlueStacks App Player, published on 6 Jan 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges.

Weakness: CWE-275

Which versions are affected by CVE-2016-4288?

It affects 1 product.

Products include Bluestacks Bluestacks.

How do I fix CVE-2016-4288?

No fix has been published for CVE-2016-4288 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-4288 being exploited?

There is no known exploitation of CVE-2016-4288 in the wild and no public exploit code.

Sources

Also known as GHSA-9v4j-w7f3-5cw9.