PT-2015-1527 · Microsoft · Windows 8.1+2

Publicado 2015-07-14 · Atualizado 2019-05-08 · CVE-2015-2361

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Microsoft Windows Server versions prior to the fixed version

Description The issue is caused by a buffer overflow in the dynamic memory of the Hyper-V service, which allows a local attacker to execute arbitrary code or cause a denial of service on the host operating system by leveraging guest operating system privileges.

Recommendations For Microsoft Windows 8.1, update to a version that includes the fix for this issue. For Microsoft Windows Server 2012 R2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting guest operating system privileges to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-10827

CVE-2015-2361

Produtos afetados

Hyper-V

Windows 8.1

Windows Server 2012 R2

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2361 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-10827 · Nota de Segurança
• http://securitytracker.com/id/1032897 · Nota
• http://technet.microsoft.com/security/bulletin/MS15-068 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-068 · Aviso do Fabricante