Lucene search
HistoryJul 14, 2015 - 9:59 p.m.
CVE-2015-2362
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
51.5%
Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS by leveraging guest OS privileges, aka “Hyper-V System Data Structure Vulnerability.”
Affected configurations
Node
microsoftwindows_8Match-x64
ORmicrosoftwindows_8Match-x86
ORmicrosoftwindows_8.1Match-
ORmicrosoftwindows_server_2008sp2
ORmicrosoftwindows_server_2008Matchr2sp1
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2datacenter
ORmicrosoftwindows_server_2012Matchr2essentials
ORmicrosoftwindows_server_2012Matchr2standard
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_8 | - | cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:x64:* |
| microsoft | windows_8 | - | cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:x86:* |
| microsoft | windows_8.1 | - | cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:* |
| microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:* |
| microsoft | windows_server_2012 | - | cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2012 | r2 | cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:datacenter:*:*:* |
| microsoft | windows_server_2012 | r2 | cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:essentials:*:*:* |
| microsoft | windows_server_2012 | r2 | cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:standard:*:*:* |
Related
cve
cve
CVE-2015-2362
2015-07-14 21:59:04
symantec
symantec
Microsoft Windows Hyper-V CVE-2015-2362 Remote Code Execution Vulnerability
2015-07-14 00:00:00
prion
prion
Design/Logic Flaw
2015-07-14 21:59:00
cvelist
cvelist
CVE-2015-2362
2015-07-14 21:00:00
nessus
nessus
openvas
openvas
Microsoft Windows Hyper-V Remote Code Execution Vulnerability (3072000)
2015-07-15 00:00:00
mskb
mskb
kaspersky
kaspersky
KLA10631 Multiple vulnerabilities in Microsoft Windows
2015-07-14 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-07-19 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
51.5%
Related for NVD:CVE-2015-2362