CVE-2015-2361

2015-07-1421:59:03

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (buffer overflow) by leveraging guest OS privileges, aka “Hyper-V Buffer Overflow Vulnerability.”

Affected configurations

Nvd

Node

microsoftwindows_8.1Match-

microsoftwindows_server_2012Matchr2datacenter

microsoftwindows_server_2012Matchr2essentials

microsoftwindows_server_2012Matchr2standard

VendorProductVersionCPE
microsoftwindows_8.1-cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
microsoftwindows_server_2012r2cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:datacenter:*:*:*
microsoftwindows_server_2012r2cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:essentials:*:*:*
microsoftwindows_server_2012r2cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:standard:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_8.1	-	cpe:2.3:o:microsoft:windows_8.1:-:::::::*
microsoft	windows_server_2012	r2	cpe:2.3:o:microsoft:windows_server_2012:r2::::datacenter:::
microsoft	windows_server_2012	r2	cpe:2.3:o:microsoft:windows_server_2012:r2::::essentials:::
microsoft	windows_server_2012	r2	cpe:2.3:o:microsoft:windows_server_2012:r2::::standard:::