PT-2015-1527 · Microsoft · Windows 8.1+2

Published 2015-07-14 · Updated 2019-05-08 · CVE-2015-2361

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Microsoft Windows Server versions prior to the fixed version

Description The issue is caused by a buffer overflow in the dynamic memory of the Hyper-V service, which allows a local attacker to execute arbitrary code or cause a denial of service on the host operating system by leveraging guest operating system privileges.

Recommendations For Microsoft Windows 8.1, update to a version that includes the fix for this issue. For Microsoft Windows Server 2012 R2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting guest operating system privileges to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-10827

CVE-2015-2361

Affected Products

Hyper-V

Windows 8.1

Windows Server 2012 R2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2361 · Security Note
• https://bdu.fstec.ru/vul/2015-10827 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-068 · Vendor Advisory
• http://securitytracker.com/id/1032897 · Note
• http://technet.microsoft.com/security/bulletin/MS15-068 · Note