Lucene search
HistoryMar 02, 2007 - 10:19 p.m.
CVE-2007-1222
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.3
Confidence
High
EPSS
0
Percentile
5.1%
Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a LaunchAgents directory.
Affected configurations
Node
applemac_os_xMatch10.4.9
parallelsparallels_desktop
Related
cve
cve
CVE-2007-1222
2007-03-02 22:19:00
prion
prion
Directory traversal
2007-03-02 22:19:00
cvelist
cvelist
CVE-2007-1222
2007-03-02 22:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.3
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2007-1222