Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability

Bugtraq ID:	38764
Class:	Design Error
CVE:	CVE-2010-1225
Remote:	No
Local:	Yes
Published:	Mar 17 2010 12:00AM
Updated:	Mar 19 2015 07:30AM
Credit:	Nicolas Economou from Core Security Technologies
Vulnerable:	Microsoft Windows Virtual PC 0 Microsoft Virtual Server 2005 R2 SP1 0 Microsoft Virtual Server 2005 0 Microsoft Virtual PC 2007 SP1 Microsoft Virtual PC 2007 0
Not Vulnerable:

Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability

Microsoft Virtual PC Hypervisor is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass memory protection mechanisms. Successfully exploiting this issue will allow local attackers to gain access to sensitive information. Combining this issue with other vulnerabilities may allow for remote code execution, overwrite arbitrary data, and gain elevated privileges on the affected computer.

The following products are affected:

Virtual PC 2007
Virtual PC 2007 SP1
Windows Virtual PC
Virtual Server 2005
Windows 7 XP Mode

Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability

The following proof-of-concept is available. The reporters of this issue have also reliably exploited this issue, in combination with another vulnerability to bypass DEP enabled systems.

• /data/vulnerabilities/exploits/38764.c

Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]

Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Virtual PC Hypervisor Memory Protection Vulnerability (Core Security Technologies)