Alert GCSA-09059 - Vulnerabilita' in Microsoft Virtual PC e Virtual

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

     Alert ID : GCSA-09059
         Data : 15 Luglio 2009
       Titolo : Vulnerabilita' in Microsoft Virtual PC e Virtual Server (MS09-033)

******************************************************************

:: Descrizione del problema

E' stata identificata una vulnerabilita' in Microsoft Virtual PC e Virtual 
Server, che potrebbe essere sfruttata per ottenere privilegi elevati.

Per sfruttare tale vulnerabilita' e' necessario possedere un account utente 
valido sul sistema operativo ospite.


:: Software interessato

Microsoft Virtual PC 2004 Service Pack 1
Microsoft Virtual PC 2007
Microsoft Virtual PC 2007 Service Pack 1
Microsoft Virtual PC 2007 x64 Edition
Microsoft Virtual PC 2007 x64 Edition Service Pack 1
Microsoft Virtual Server 2005 R2 Service Pack 1
Microsoft Virtual Server 2005 R2 x64 Edition Service Pack 1


:: Impatto

Privilege escalation


:: Soluzioni

Applicare gli aggiornamenti rilasciati da Microsoft:

http://www.microsoft.com/technet/security/Bulletin/MS09-033.mspx


:: Riferimenti

Microsoft Security Bulletin MS09-033
http://www.microsoft.com/technet/security/Bulletin/MS09-033.mspx

US-CERT - Technical Cyber Security Alert TA09-160A
http://www.us-cert.gov/cas/techalerts/TA09-195A.html

Secunia
http://secunia.com/advisories/35808

VuPEN
http://www.vupen.com/english/advisories/2009/1890

Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1542
-----BEGIN PGP SIGNATURE-----

iQCVAwUBSl2ylfOB+SpikaiRAQIM7wP6AwEvn5ezOsz433/DnEAHpSZ6lOpLY2/c
2bdMxbK4CzWMEnT5p+Bcb/zSlNDkmHQpsbbkW+cj/FTiXLdWpi01UZUcJJTRXoPk
hfEsO5+L7GzbmiWVBBer50z+q4bTnWUmErTJYXsrXVCGp+uIfxDTOwc9xDkMSgHQ
nDbdgwndqgA=
=XAsh
-----END PGP SIGNATURE-----