int(4759)

Vulnerability Bulletins


Aumento de privilegios en Virtual PC

Vulnerability classification

Property Value
Confidence level Oficial
Impact Obtener acceso
Dificulty Experto
Required attacker level Acceso remoto con cuenta

System information

Property Value
Affected manufacturer Microsoft
Affected software Microsoft Virtual PC 2004
Microsoft Virtual PC 2007
Microsoft Virtual Server 2005

Description

Se ha descubierto una vulnerabilidad en Microsoft Virtual PC.

Un atacante remoto|local podría ejecutar código kernel arbitrario y aumentar privilegios mediante una aplicación especialmente diseñada.

Solution



Actualización de software

Microsoft (MS09-033)
Microsoft Virtual PC 2004 Service Pack 1 / patch VPC2004x86-KB969856
Microsoft Virtual PC 2007 x86 / patch VPC2007nospx86-KB969856
Microsoft Virtual PC 2007 Service Pack 1 / patch VPC2007x86-KB969856
Microsoft Virtual PC 2007 x64 Edition / patch VPC2007nospx64-KB969856
Microsoft Virtual PC 2007 x64 Edition Service Pack 1 / patch VPC2007x64-KB969856
Microsoft Virtual Server 2005 R2 Service Pack 1 / patch VSR2SP1x86-KB969856
Microsoft Virtual Server 2005 R2 x64 Edition Service Pack 1 / patch VSR2SP1x64-KB969856

Standar resources

Property Value
CVE CVE-2009-1542
BID

Other resources

Microsoft Security Bulletin (MS09-033)
http://www.microsoft.com/technet/security/Bulletin/MS09-033mspx

Version history

Version Comments Date
1.0 Aviso emitido 2009-07-15