(MS15-017)Vulnerability in Virtual Machine Manager Could Allow Elevation of Privilege (3035898)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2015-0012

  Advisory Date: MAR 19, 2015

---

  DESCRIPTION

This security update resolves a privately reported vulnerability in Virtual Machine Manager (VMM). The vulnerability could allow elevation of privilege if an attacker logs on an affected system. An attacker must have valid Active Directory logon credentials and be able to log on with those credentials to exploit the vulnerability.

  SOLUTION

  PATCH: https://technet.microsoft.com/library/security/MS15-017

  AFFECTED SOFTWARE AND VERSION

• Microsoft System Center Virtual Machine Manager 2012 R2 Update Rollup 4

Related Vulnerability

• February 2015 - Microsoft Releases 9 Security Advisories