Privilege escalation in Windows and Windows Server - CVE-2017-0021

Detailed vulnerability description

The vulnerability allows a remote attacker with access to guest operating system to execute arbitrary code on the host system.

The vulnerability exists due to input validation error when processing SMB packets in Windows Hyper-V. A remote attacker with access to guest system can send specially crafted SMB packets to the host system and execute arbitrary code on the host system.

Successful exploitation of this vulnerability may allow an attacker to compromise the host system.

How to mitigate CVE-2017-0021

Install updates from vendor's website.

Sources

• https://technet.microsoft.com/en-us/library/security/MS17-008