Information disclosure

The Virtual Machine Monitor VMM in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges...

CVE-2009-1542

The Virtual Machine Monitor VMM in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges...

CVE-2009-1542

The CVE-2009-1542 issue is a privilege-escalation vulnerability in the Virtual Machine Monitor (VMM) of Microsoft Virtual PC 2004 SP1, Virtual PC 2007 (including SP1), and Virtual Server 2005 R2 SP1. The VMM fails to enforce CPU privilege-level requirements for specific machine instructions, pote...

Microsoft Security Bulletin MS09-033 - Important Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (969856)

Microsoft Security Bulletin MS09-033 - Important Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege 969856 Published: July 14, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Virtu...

Microsoft Virtual PC / Microsoft Virtual Server privilege escalation

Acceess to certain privileged instructions is not checked within virtual machine...

Microsoft Virtual PC and Virtual Server Privilege Escalation Vulnerability

Description Microsoft Virtual PC and Virtual Server are prone to a privilege-escalation vulnerability caused by an error in decoding privileged instructions. Note that this issue affects only systems that do not use hardware-assisted virtualization. Successful exploits may allow local attackers t...

MS09-033: Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (969856)

The remote host is running a version of Virtual PC or Virtual Server that incorrectly validates privilege levels when executing specific instructions in the Virtual Machine Monitor. An attacker who has logged in to a guest operating system running under the affected software can leverage this iss...

Citrix XenCenterWeb (XSS/SQL/RCE) Multiple Remote Vulnerabilities

Exploit for windows platform in category remote exploits ================================================================= Citrix XenCenterWeb XSS/SQL/RCE Multiple Remote Vulnerabilities ================================================================= Secure Network - Security Research Advisory...

Debian: Security Advisory (DSA-1060-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

Design/Logic Flaw

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

CVE-2007-5419

The CVE-2007-5419 entry concerns a 3Com 3CRWER100-75 router with 1.2.10ww software. When an optional virtual server is enabled, the device configures the server to accept all source IP addresses on the external interface unless other options are chosen, potentially exposing the router to remote a...

CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

3Com WIFI router remote administration vulnerability.

3Com 3CRWER100-75 is a wireless cable/DSL router widely used here, in israel. The router has a web management interface in it's port 80 available from inside the network. When the administrator assign a virtual server to port 80 In the management web filled under the firewall tab and the line is...

Microsoft Virtual PC/Virtual Server堆溢出漏洞（MS07-049）

BUGTRAQ ID: 25298 CVECAN ID: CVE-2007-0948 Microsoft Virtual PC和Virtual Server都是流行的虚拟机工具，允许在同一台计算机上运行多个操作系统。 Microsoft Virtual PC和Microsoft Virtual Server中存在权限提升漏洞，这可能允许对虚拟机操作系统拥有管理员权限的用户在主机操作系统或其他虚拟机操作系统上运行代码。...

MS07-049: Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

The remote host is running a version of Virtual PC or Virtual Server that is vulerable to a heap overflow that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on the host operating system or others guests. To succeed, the attacker needs administrative...

Microsoft Security Bulletin MS07-049 - Important Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

Microsoft Security Bulletin MS07-049 - Important Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege 937986 Published: August 14, 2007 Version: 1.0 General Information Executive Summary This important security update resolves one privately reported vulnerability. Thi...

Microsoft Virtual PC / Virtual Server buffer overflow

Heap based buffer overflow allows guest operation system user with administrative privileges to execute code on host operation system or another guest operation system...

Heap overflow

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."...

CVE-2007-0948

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."...