CVE-2016-4288

High

Published: 06/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges.

Risk Assessment

This vulnerability could lead to unauthorized access to the system and allow attackers to execute malicious software with elevated privileges.

Recommendation

It is recommended to update BlueStacks App Player to the latest version and review the permissions of registry keys associated with the installer.

Other vulnerabilities in BlueStacks App Player

CVE-2019-25293High
BlueStacks App Player version 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe to inject malicious executables and escalate privileges.

Original NVD description (English source)