Published: 15/07/2009 Updated: 12/10/2018

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

VMScore: 801

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft virtual pc 2007
microsoft virtual pc 2004
microsoft virtual server 2005

CWE-264 http://secunia.com/advisories/35808 http://www.vupen.com/english/advisories/2009/1890 http://www.securitytracker.com/id?1022544 http://www.us-cert.gov/cas/techalerts/TA09-195A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6166 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-033 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-1542

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect