Microsoft Windows Knowledge Base Article 977894 update is not installed (WinMs10kb977894Update)

Vuln ID: 55926
Risk Level: Low risk vulnerability  Low WinMs10kb977894Update
Platforms: Microsoft Windows Server 2008: x64, Microsoft Windows Server 2008: SP2 x64, Microsoft Windows Server 2008: R2 x64
Description:

Microsoft Knowledge Base Article 977894 is not installed, which could allow a remote attacker to exploit the following vulnerability:

Microsoft Windows is vulnerable to a denial of service, caused by improper validation of the encoding of specific machine instructions executed inside the guest virtual machines by the Hyper-V server. A local authenticated attacker could exploit this vulnerability from a hosted guest virtual machine using a malformed sequence of machine instructions to cause the Hyper-V server to stop responding.

Remedy:

Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS10-010. See References.

False Positives:
False Negatives:
Required Permission: Windows login
Additional Information:

References:

Microsoft Security Bulletin MS10-010
Vulnerability in Windows Hyper-V Could Allow Denial of Service (977894)
http://www.microsoft.com/technet/security/bulletin/ms10-010.mspx

IBM Internet Security Systems X-Force Database
Microsoft Windows Hyper-V instruction set denial of service
http://xforce.iss.net/xforce/xfdb/55925

ISS X-Force
Microsoft Windows Knowledge Base Article 977894 update is not installed
http://www.iss.net/security_center/static/55926.php

CVE CVE-2010-0026
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0026


X-Force Logo
Know Your Risks
Mitre.org CVE Logo
Common Vulnerabilties & Exposures