Information disclosure

🗓️ 15 Jul 2009 15:30:00Reported by PRIOn knowledge baseType

The Virtual Machine Monitor in Microsoft Virtual PC and Virtual Server versions 2004 SP1, 2007, and 2007 SP1, and 2005 R2 SP1 does not enforce CPU privilege-level requirements, allowing guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application. (Information Disclosure

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2009-1542	15 Jul 200915:00	–	cve
Cvelist	CVE-2009-1542	15 Jul 200915:00	–	cvelist
NVD	CVE-2009-1542	15 Jul 200915:30	–	nvd
OpenVAS	Microsoft Virtual PC/Server Privilege Escalation Vulnerability (969856)	15 Jul 200900:00	–	openvas
OpenVAS	Microsoft Virtual PC/Server Privilege Escalation Vulnerability (969856)	15 Jul 200900:00	–	openvas
securityvulns	Microsoft Security Bulletin MS09-033 - Important Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (969856)	15 Jul 200900:00	–	securityvulns
securityvulns	Microsoft Virtual PC / Microsoft Virtual Server privilege escalation	15 Jul 200900:00	–	securityvulns
Tenable Nessus	MS09-033: Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (969856)	14 Jul 200900:00	–	nessus
seebug.org	Microsoft Virtual PC和Virtual Server本地权限提升漏洞（MS09-033）	16 Jul 200900:00	–	seebug

Source	Link
secunia	www.secunia.com/advisories/35808
vupen	www.vupen.com/english/advisories/2009/1890
securitytracker	www.securitytracker.com/id
us-cert	www.us-cert.gov/cas/techalerts/TA09-195A.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6166
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-033

12 Oct 2018 21:51Current

7.7High risk

Vulners AI Score7.7

EPSS0.17999