Address Corruption Vulnerability in Microsoft Windows 8 and Windows Server 2012 Hyper-V

CVE-2013-3898 · HIGH Severity

AV:A/AC:M/AU:N/C:C/I:C/A:C

Microsoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address validity, which allows guest OS users to execute arbitrary code in all guest OS instances, and allows guest OS users to cause a denial of service (host OS crash), via a guest-to-host hypercall with a crafted function parameter, aka "Address Corruption Vulnerability."

Learn more about our Cis Benchmark Audit For Server Software.