Vulnerability Description
BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions.
CVSS Score
7.1
HIGH
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bluestacks | Bluestacks App Player | < 4.90 |
Related Weaknesses (CWE)
References
- https://support.bluestacks.com/hc/en-us/articles/360021469391-Release-NotesRelease NotesVendor Advisory
- https://support.bluestacks.com/hc/en-us/articles/360028842471Vendor Advisory
- https://support.bluestacks.com/hc/en-us/articles/360021469391-Release-NotesRelease NotesVendor Advisory
- https://support.bluestacks.com/hc/en-us/articles/360028842471Vendor Advisory
FAQ
What is CVE-2019-12936?
CVE-2019-12936 is a vulnerability with a CVSS score of 7.1 (HIGH). BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions.
How severe is CVE-2019-12936?
CVE-2019-12936 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-12936?
Check the references section above for vendor advisories and patch information. Affected products include: Bluestacks Bluestacks App Player.