Lucene search

K
nvd[email protected]NVD:CVE-2007-2454
HistoryMay 02, 2007 - 5:19 p.m.

CVE-2007-2454

2007-05-0217:19:00
web.nvd.nist.gov
4

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.001

Percentile

26.5%

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations.

Affected configurations

Nvd
Node
parallelsparallels_desktop
VendorProductVersionCPE
parallelsparallels_desktop*cpe:2.3:a:parallels:parallels_desktop:*:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.001

Percentile

26.5%

Related for NVD:CVE-2007-2454