The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1…
Priority MEDIUM 50CWE-264Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.
Summary
The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."
Why it matters now
EPSS 0.07977 94th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:virtual_pc:2004:sp1:*:*:*:*:*:* | 2004 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:virtual_pc:2007:*:*:*:*:*:*:* | 2007 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:virtual_pc:2007:*:x64:*:*:*:*:* | 2007 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:virtual_pc:2007:sp1:*:*:*:*:*:* | 2007 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:*:*:*:*:*:* | 2005 r2_sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:x64:*:*:*:*:* | 2005 r2_sp1 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:virtual_pc:2004:sp1:*:*:*:*:*:* Versions 2004 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:virtual_pc:2007:*:*:*:*:*:*:* Versions 2007 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:virtual_pc:2007:*:x64:*:*:*:*:* Versions 2007 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:virtual_pc:2007:sp1:*:*:*:*:*:* Versions 2007 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:*:*:*:*:*:* Versions 2005 r2_sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:virtual_server:2005:r2_sp1:x64:*:*:*:*:* Versions 2005 r2_sp1 Vulnerable ·Microsoft
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2009-1542
- 2026-10-03 Alias added: GHSA-7v53-rx9j-jjwf
References
More Microsoft Virtual Pc vulnerabilities
- TI-2010-01180 The memory-management implementation in the Virtual Machine Monitor (aka VMM or… CVSS 2.0HIGH 9.3
- TI-2007-00921 Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and… CVSS 2.0HIGH 9.3
- TI-2004-00098 VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers… CVSS 2.0MEDIUM 4.6
Sources
- CVE-2009-1542 · CVE Program
- CVE-2009-1542 · NVD
- FIRST EPSS
- GHSA-7v53-rx9j-jjwf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences