(MS13-092) Vulnerability in Hyper-V Could Allow Elevation of Privilege (2893986)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2013-3898

  Advisory Date: NOV 21, 2013

---

  DESCRIPTION

This security update resolves a reported vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker passes a maliciously-crafted function parameter in a hypercall from an existing running virtual machine to the hypervisor. The vulnerability could also allow denial of service for the Hyper-V host.

  SOLUTION

  PATCH: https://technet.microsoft.com/en-us/security/bulletin/ms13-092

  AFFECTED SOFTWARE AND VERSION

• Windows 8 for x64-based Systems (Pro and Enterprise editions only)
• Windows Server 2012 (Standard and Datacenter editions
• and Hyper-V Server 2012 only)
• Windows Server 2012 (Server Core installation)

Related Vulnerability

• November 2013 - Microsoft Releases 8 Security Advisories