Security Bug in Parallels Desktop - Simple guest to host VM escape

VivekV

Bit poster
This is a little story about exploiting guest to host VM escape not-a-vulnerability in Parallels Desktop 10 for Mac. Discovered attack is not about some serious hardcore stuff like hypervisor bugs or low-level vulnerabilities in guest-host communication interfaces, it can be easily performed even by very lame Windows malware if your virtual machine has insecure settings.

Here is the complete discovery and exploit information.

Theory covered by Vivek Verma - Web Developer & Security Expert
 
Back
Top