| CVE-2013-3898 | Date: (C)2013-11-19 (M)2023-12-22 |
Microsoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address validity, which allows guest OS users to execute arbitrary code in all guest OS instances, and allows guest OS users to cause a denial of service (host OS crash), via a guest-to-host hypercall with a crafted function parameter, aka "Address Corruption Vulnerability."
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V2 Severity: |
| CVSS Score : 7.9 |
| Exploit Score: 5.5 |
| Impact Score: 10.0 |
| |
| CVSS V2 Metrics: |
| Access Vector: ADJACENT_NETWORK |
| Access Complexity: MEDIUM |
| Authentication: NONE |
| Confidentiality: COMPLETE |
| Integrity: COMPLETE |
| Availability: COMPLETE |
| | |
