CVE-2007-0948

2007-08-1422:17:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

microsoft

virtual pc

buffer overflow

security vulnerability

cve-2007-0948

nvd

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.188 Low

EPSS

Percentile

96.2%

JSON

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to “interaction and initialization of components.”

CPENameOperatorVersion
microsoft:virtual_pcmicrosoft virtual pceq6.1
microsoft:virtual_servermicrosoft virtual servereq2005
microsoft:virtual_pcmicrosoft virtual pceq2004
microsoft:virtual_pcmicrosoft virtual pceq7

CPE	Name	Operator	Version
microsoft:virtual_pc	microsoft virtual pc	eq	6.1
microsoft:virtual_server	microsoft virtual server	eq	2005
microsoft:virtual_pc	microsoft virtual pc	eq	2004
microsoft:virtual_pc	microsoft virtual pc	eq	7