Memory Management Vulnerability in Microsoft Virtual Machine Monitor

CVE-2010-1225

Summary

The memory-management functionality within the Virtual Machine Monitor of Microsoft Virtual PC 2007, Virtual Server 2005, and Windows Virtual PC has a flaw that inadequately restricts memory access from guest operating systems. This vulnerability could allow context-dependent attackers to circumvent certain anti-exploitation protections by manipulating input to susceptible applications within a guest OS. It is important to note that this issue primarily affects systems running vulnerable applications, as memory areas accessible from the guest OS cannot be used to execute remote code or elevate privileges, nor is any data from the host system exposed.

References