CVE Database
/

CVE-2009-1542

Back to search

CVE-2009-1542

Published: Jul 15, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2009-1890
vdb-entry
x_refsource_VUPEN
35808
third-party-advisory
x_refsource_SECUNIA
MS09-033
vendor-advisory
x_refsource_MS
1022544
vdb-entry
x_refsource_SECTRACK
TA09-195A
third-party-advisory
x_refsource_CERT
oval:org.mitre.oval:def:6166
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now