171 matches found
The vulnerability of VMware Player allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.
The vulnerability of the TPInt.dll library in VMware Player’s hypervisor is related to resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...
The vulnerability of the Linux operating system allows a malicious individual to trigger a service failure, increase their privileges, or execute arbitrary code.
Overfilling the buffer in the completeemulatedmmio function allows the user of the host operating system to execute any code in the host operating system...
CVE-2016-0088
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability."...
MS16-045: Security update for Windows Hyper-V: April 12, 2016
Resolves vulnerabilities in Windows that could allow remote code execution if an authenticated attacker on a guest operating system runs a specially crafted application that causes the Hyper-V host operating system to execute arbitrary code. Customers who have not enabled the Hyper-V role are not...
MS16-045: Security Update for Windows Hyper-V (3143118)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists in Hyper-V due to a failure to properly validate input from an authenticated user on a guest operating system. An attacker can exploit...
QEMU Elevation of Privilege Vulnerability
QEMU is a suite of analog processor software. QEMU has a security vulnerability that allows a local attacker to gain root privileges in the host operating system...
USN-2806-1 linux-lts-vivid vulnerability
Ben Serebrin discovered that the KVM hypervisor implementation in the Linux kernel did not properly catch Alignment Check exceptions. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS...
The vulnerability of the QEMU hardware emulation software allows a hacker to execute any code on the host operating system.
The vulnerability of the pitioportread function in the QEMU hardware emulation software is caused by buffer overflow. Exploiting this vulnerability allows a local attacker to execute arbitrary code on the host operating system...
The vulnerability of Xen hypervisors allows a attacker to trigger a failure in the host operating system services.
The vulnerability of Xen hypervisors is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a local attacker to cause a failure in the host operating system’s services...
The vulnerability of the VMware Workstation hypervisor allows a attacker to cause a failure in the guest or host operating system.
The vulnerability of VMware Workstation exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause a failure in the maintenance of 32-bit or 64-bit host operating systems using a specially crafted RPC request...
Remote Elevation of Privilege Vulnerability in Multiple VMware Products
VMWare is a "virtual PC" software that allows you to run two or more Windows, DOS, or Linux systems on a single machine at the same time. A remote elevation of privilege vulnerability exists in multiple VMware products, which could be exploited by remote attackers to gain elevated privileges on t...
VMware Tools 3.1 HGFS.Sys Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26556/info VMware Tools is prone to a privilege-escalation vulnerability. The application fails to properly drop privileges before performing certain functions. An attacker can exploit this in the guest opertaing system t...
Parallels Drag and Drop Hidden Share Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22597/info Parallels is prone to an arbitrary code-execution vulnerability because of a design flaw in the affected application. An attacker can exploit this issue to create files in the host operating system. This could...
VMware Server <= 2.0.1,ESXi Server <= 3.5 Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36842/info VMware products are prone to a directory-traversal vulnerability because they fail to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information...
PT-2014-1009 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.13.6 Description: The issue is related to a buffer overflow in the complete emulated mmio function, which allows guest OS users to execute arbitrary code on the host OS. This is achieved by leveraging a loop...
CVE-2011-2146
mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and...
Linux Kernel 2.6.x - KVM pit_ioport_read() Local Denial of Service
Linux Kernel 2.6.x - KVM pitioportread Local Denial of Service source: https://www.securityfocus.com/bid/38038/info The Linux kernel is prone to a local denial-of-service vulnerability that affects the Kernel-based Virtual Machine KVM. Attackers with local access to a guest operating system can...
VMware Server 2.0.1 ESXi Server 3.5 - Directory Traversal
VMware Server 2.0.1 ESXi Server 3.5 - Directory Traversal source: https://www.securityfocus.com/bid/36842/info VMware products are prone to a directory-traversal vulnerability because they fail to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain...
CVE-2008-4722
Unspecified vulnerability in Sun Integrated Lights-Out Manager ILOM 2.0.1.5 through 2.0.4.26 allows remote authenticated users to 1 access the service processor SP and cause a denial of service shutdown or reboot, or 2 access the host operating system and have an unspecified impact, via unknown...
Sun xVM VirtualBox < 1.6.4 Privilege Escalation Vulnerability PoC
Exploit for multiple platform in category dos / poc ================================================================= Sun xVM VirtualBox 1.6.4 Privilege Escalation Vulnerability PoC ================================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cor...