« Volver al listado

CVE-2010-1225

Estado: ModificadaAlta (9.3)—

The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allows context-dependent attackers to bypass certain anti-exploitation protection mechanisms on the guest OS via crafted input to a vulnerable application. NOTE: the vendor reportedly found that only systems with an otherwise vulnerable application are affected, because "the memory areas accessible from the guest cannot be leveraged to achieve either remote code execution or elevation of privilege and ... no data from the host is exposed to the guest OS."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Microsoft — Virtual PCMicrosoft — Virtual ServerMicrosoft — Windows Virtual PC

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-1225",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-04-01T22:30:00.327",
  "references": [
    {
      "url": "http://securitytracker.com/id?1023720",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.coresecurity.com/content/virtual-pc-2007-hypervisor-memory-protection-bug",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510154/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/38764",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1023720",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.coresecurity.com/content/virtual-pc-2007-hypervisor-memory-protection-bug",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/510154/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38764",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allows context-dependent attackers to bypass certain anti-exploitation protection mechanisms on the guest OS via crafted input to a vulnerable application.  NOTE: the vendor reportedly found that only systems with an otherwise vulnerable application are affected, because \"the memory areas accessible from the guest cannot be leveraged to achieve either remote code execution or elevation of privilege and ... no data from the host is exposed to the guest OS.\""
    },
    {
      "lang": "es",
      "value": "La aplicación de administración de memoria en Virtual Machine Monitor (alias VMM o hipervisor) en Microsoft Virtual PC 2007 Gold y SP1 y Virtual Server 2005 Gold y R2 SP1 y Windows Virtual PC no restringe adecuadamente el acceso desde el sistema operativo huesped a lugares de memoria en el área de trabajo VMM, lo que permite a atacantes dependientes del contexto pasar por alto ciertos mecanismos de protección contra la explotación en el sistema operativo huésped mediante una entrada manipulada para una aplicación vulnerable. NOTA: el fabricante considera que sólo los sistemas con una aplicación ya vulnerable se ven afectados, ya que \"las áreas de memoria accesibles desde el huésped no se pueden aprovechar para lograr bien la ejecución remota de código o bien la elevación de privilegios y ... no hay datos del equipo anfitrión expuestos al SO huésped. \""
    }
  ],
  "lastModified": "2026-06-16T23:17:53.280",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:virtual_pc:2007:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E550D9F-C197-4EA1-A018-73C0E8B03E6C"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:virtual_pc:2007:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98616FA1-76B2-40C1-806E-71A4D76CB5D1"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:virtual_server:2005:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3900BDEA-91E7-4534-8262-4A782BA9C19C"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5705C94-8B44-48D7-873B-1909FE2D020E"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_virtual_pc:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45C4ADB8-E0D3-465D-9BBF-89F90453EC1F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}