CVE-2011-1872

Related Files

Core Security Technologies Advisory 2011.0203

Posted Jun 14, 2011

Authored by Core Security Technologies, Nicolas A. Economou | Site coresecurity.com

Core Security Technologies Advisory - A security vulnerability was found in the driver 'vmswitch.sys', associated to the Windows Hypervisor subsystem, allowing an authenticated local DoS. The vulnerability could allow denial of service if a specially crafted packet is sent to the VMBus by an authenticated user in one of the guest virtual machines hosted by the Hyper-V server. The impact is all guests on that host became non-responsive. An attacker must have valid logon credentials and be able to send specially crafted content from a guest virtual machine to exploit this vulnerability.

tags | exploit, denial of service, local

systems | windows

advisories | CVE-2011-1872

SHA-256 | 91762eded6d6cb85d92e2b2d56180960888179b29b556d5094c71c5746715573

Download | Favorite | View