← Vulnerability feed

Vulnerability record · CVE-2009-1542 · published 15 July 2009

CVE-2009-1542: Microsoft virtual pc permissions and access controls vulnerability

Microsoft · Virtual Pc

The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."

9.0 CVSS 2.0 High EPSS 8.0% · top 5.4% CWE-264 · Permissions and access controls
9.0CVSS 2.0 base score
8.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/35808
http://www.securitytracker.com/id?1022544
http://www.us-cert.gov/cas/techalerts/TA09-195A.html US Government Resource
http://www.vupen.com/english/advisories/2009/1890
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6166
http://secunia.com/advisories/35808
http://www.securitytracker.com/id?1022544
http://www.us-cert.gov/cas/techalerts/TA09-195A.html US Government Resource
http://www.vupen.com/english/advisories/2009/1890
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6166

Track CVE-2009-1542 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2010-1225Microsoft virtual pc permissions and access controls vulnerabilityThe memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server…EPSS 28%9.3CVE-2007-0948Microsoft virtual pc vulnerabilityHeap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administ…EPSS 12%4.6CVE-2004-0115Microsoft virtual pc vulnerabilityVirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbi…EPSS 2.2%5.1CVE-2015-3246libuser userhelper direct /etc/passwd write race conditionlibuser before 0.56.13-8 and 0.60 before 0.60-7, as used by the userhelper program in the usermode package, modifies /etc/passwd directly instead of …KEVEPSS 8.8%analysed6.6CVE-2015-1769Windows Mount Manager symlink mishandling allows local privilege escalationThe Windows Mount Manager mishandles symbolic links, allowing a crafted USB device to trigger arbitrary code execution. Because the flaw is in a core…KEVEPSS 4.1%analysed7.8CVE-2016-3643SolarWinds Virtualization Manager sudo misconfiguration privilege escalationSolarWinds Virtualization Manager 6.3.1 and earlier ship with a misconfigured sudo policy that lets a local user run privileged commands, as shown by…KEVEPSS 3.7%analysed

Source: NIST National Vulnerability Database (record CVE-2009-1542), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.