Privilege escalation in Microsoft Windows and Windows Server - CVE-2017-0095

Vulnerability details

The vulnerability allows a remote attacker with access to guest operating system to execute arbitrary code on the host system.

The vulnerability exists due to input validation error when processing SMB packets in Windows Hyper-V. A remote attacker with access to guest system can send specially crafted SMB packets to the host system and execute arbitrary code on the host system.

Successful exploitation of this vulnerability may allow an attacker to compromise the host system.

Affected software

How to mitigate CVE-2017-0095

Install updates from vendor's website.

External References

• https://technet.microsoft.com/en-us/library/security/MS17-008

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Windows Hyper-V
• Hyper-V vSMB Remote Code Execution Vulnerability