The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service (host OS hang) via a crafted application that executes a malformed series of machine instructions, aka "Hyper-V Instruction Set Validation Vulnerability."

The remote host is affected by a denial of service flaw that exists in Hyper-V.  A local attacker can leverage this to crash all the VMs on the remote host.

To successfully exploit this vulnerability, an attacker would need an account on one of the remote VMs and be able to execute arbitrary code on it.

Detections

Analytics

CVE-2010-0026

high

Tenable Plugins

medium