CVE-2010-1225

{"id": "CVE-2010-1225", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-04-01T22:30:00.327", "references": [{"url": "http://securitytracker.com/id?1023720", "source": "cve@mitre.org"}, {"url": "http://www.coresecurity.com/content/virtual-pc-2007-hypervisor-memory-protection-bug", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/510154/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/38764", "tags": ["Exploit"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allows context-dependent attackers to bypass certain anti-exploitation protection mechanisms on the guest OS via crafted input to a vulnerable application. NOTE: the vendor reportedly found that only systems with an otherwise vulnerable application are affected, because \"the memory areas accessible from the guest cannot be leveraged to achieve either remote code execution or elevation of privilege and ... no data from the host is exposed to the guest OS.\""}, {"lang": "es", "value": "La aplicaci\u00f3n de administraci\u00f3n de memoria en Virtual Machine Monitor (alias VMM o hipervisor) en Microsoft Virtual PC 2007 Gold y SP1 y Virtual Server 2005 Gold y R2 SP1 y Windows Virtual PC no restringe adecuadamente el acceso desde el sistema operativo huesped a lugares de memoria en el \u00e1rea de trabajo VMM, lo que permite a atacantes dependientes del contexto pasar por alto ciertos mecanismos de protecci\u00f3n contra la explotaci\u00f3n en el sistema operativo hu\u00e9sped mediante una entrada manipulada para una aplicaci\u00f3n vulnerable. NOTA: el fabricante considera que s\u00f3lo los sistemas con una aplicaci\u00f3n ya vulnerable se ven afectados, ya que \"las \u00e1reas de memoria accesibles desde el hu\u00e9sped no se pueden aprovechar para lograr bien la ejecuci\u00f3n remota de c\u00f3digo o bien la elevaci\u00f3n de privilegios y ... no hay datos del equipo anfitri\u00f3n expuestos al SO hu\u00e9sped. \""}], "lastModified": "2018-10-10T19:56:14.470", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:virtual_pc:2007:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E550D9F-C197-4EA1-A018-73C0E8B03E6C"}, {"criteria": "cpe:2.3:a:microsoft:virtual_pc:2007:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98616FA1-76B2-40C1-806E-71A4D76CB5D1"}, {"criteria": "cpe:2.3:a:microsoft:virtual_server:2005:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3900BDEA-91E7-4534-8262-4A782BA9C19C"}, {"criteria": "cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5705C94-8B44-48D7-873B-1909FE2D020E"}, {"criteria": "cpe:2.3:a:microsoft:windows_virtual_pc:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45C4ADB8-E0D3-465D-9BBF-89F90453EC1F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}