DLL Hijacking Vulnerability in JetBrains ReSharper Installers
CVE-2019-16407

7.3HIGH

Key Information:

Vendor

Jetbrains
Status
Resharper
Vendor
CVE Published:
2 October 2019

What is CVE-2019-16407?

The ReSharper installers from JetBrains prior to version 2019.2 are vulnerable to a DLL Hijacking issue. This vulnerability allows malicious actors to exploit the installation process, potentially leading to unauthorized execution of arbitrary code on the target system. Users are advised to update to the latest versions to mitigate the risk associated with this security flaw.

References

https://blog.jetbrains.com/blog/2019/09/26/jetbrains-secu...
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.