← Back

CVE-2013-3898

nvd nist
Published: Nov 13, 2013Modified: Apr 29, 2026

JSON object

Loading...
7.9
Vector
AV:A/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 5.5 / Impact: 10.0
Source: NVD

Description

Microsoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address validity, which allows guest OS users to execute arbitrary code in all guest OS instances, and allows guest OS users to cause a denial of service (host OS crash), via a guest-to-host hypercall with a crafted function parameter, aka "Address Corruption Vulnerability."

Affected (2)

Microsoft
2 products
Windows Server 2012
Windows 8
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Windows Server 2012
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Windows 8
All versions

Related CWEs

CWE-264
CWE-264

References (6)

Source: secure@microsoft.com
US Government Resource
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.