Microsoft Virtual PC/Virtual Server堆溢出漏洞（MS07-049）

BUGTRAQ ID: 25298 CVECAN ID: CVE-2007-0948 Microsoft Virtual PC和Virtual Server都是流行的虚拟机工具，允许在同一台计算机上运行多个操作系统。 Microsoft Virtual PC和Microsoft Virtual Server中存在权限提升漏洞，这可能允许对虚拟机操作系统拥有管理员权限的用户在主机操作系统或其他虚拟机操作系统上运行代码。...

CVE-2007-0948

The CVE-2007-0948 issue is a heap overflow vulnerability in Microsoft Virtual PC 2004, PC for Mac 7.1/7, and Virtual Server 2005/2005 R2. A guest OS administrator could cause a heap overflow that allows code execution on the host or other guests, elevating privileges. Exploitation requires admini...