CVEvulnerability
CVE-2007-0948
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-08-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
Affected configurations
• microsoft virtual pc 6.1
• microsoft virtual pc 7
• microsoft virtual pc 2004
• microsoft virtual server 2005
References
- http://secunia.com/advisories/26444 Vendor Advisory
- http://www.securityfocus.com/bid/25298 Patch
- http://www.securitytracker.com/id?1018567 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-226A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2873 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259 oval.cisecurity.org
- http://secunia.com/advisories/26444 Vendor Advisory
- http://www.securityfocus.com/bid/25298 Patch
- http://www.securitytracker.com/id?1018567 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-226A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2873 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259 oval.cisecurity.org