Attacking the VM Worker Process

Minimalist · Sep 11, 2019

In the past year we invested a lot of time making Hyper-V research more accessible to everyone. Our first blog post, “First Steps in Hyper-V Research”, describes the tools and setup for debugging the hypervisor and examines the interesting attack surfaces of the virtualization stack components. We then published “Fuzzing para-virtualized devices in Hyper-V”, which has been the focus of our friends at the Virtualization Security Team. In this blog they dig deep into the VSPs-VSCs communication via VMBus and describe an interesting guest-to-host vulnerability in vPCI VSP, which resides in the root partition’s kernel (vpcivsp.sys). In August, Joe Bialek gave an amazing talk at Black Hat, describing how he exploited another vulnerability in the IDE emulator, which resides in the Virtual Machine Worker Process (VMWP). With that, it’s time we dig deeper into the internals of VMWP, and consider what other vulnerabilities might be there.
Click to expand...

https://msrc-blog.microsoft.com/2019/09/11/attacking-the-vm-worker-process/

Log in or Sign up

Attacking the VM Worker Process

Minimalist Registered Member

Log in or Sign up

Attacking the VM Worker Process

Minimalist Registered Member

Useful Searches