CVE-2016-4288

Description

A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges.

Affected products

• Bluestacks / App Player2.1.3.5650 – 2.1.3.5650

References

• MISChttp://www.talosintelligence.com/reports/TALOS-2016-0124/