MS11-047 MS11-047 - Important : Vulnerability in Hyper-V Could Allow Denial of Service (2525835) - Version: 1.0
Version2011-06-14
Severity Rating: Important
Revision Note: V1.0 (June 14, 2011): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Windows Server 2008 Hyper-V and Windows Server 2008 R2 Hyper-V. The vulnerability could allow denial of service if a specially crafted packet is sent to the VMBus by an authenticated user in one of the guest virtual machines hosted by the Hyper-V server. An attacker must have valid logon credentials and be able to send specially crafted content from a guest virtual machine to exploit this vulnerability. The vulnerability could not be exploited remotely or by anonymous users.
Bulletin details at Microsoft.com
Bulletin details at Microsoft.com
Related CVE Entries
Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."
Max CVSS
4.7
EPSS Score
0.09%
Published
2011-06-16
Updated
2020-09-28