Design/Logic Flaw

Parallels allows local users to cause a denial of service virtual machine abort via 1 certain INT instructions, as demonstrated by INT 0xAA; 2 an IRET instruction when an invalid address is at the top of the stack; 3 a malformed MOVNTI instruction, as demonstrated by using a register as a...

CVE-2007-2454

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations...

CVE-2007-2454

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations...

CVE-2007-2455

Technical details about CVE-2007-2455 are not publicly available in the provided connected documents; no affected products, root cause, impact, or remediation are specified. Monitor for updates in future reports.

CVE-2007-2454

CVE-2007-2454 describes a heap-based buffer overflow in the VGA device used by Parallels. The flaw allows local users with root access inside the guest to terminate the virtual machine and potentially execute arbitrary code on the host via vectors related to bitblt operations. Documents do not pr...

CVE-2007-2455

Parallels allows local users to cause a denial of service virtual machine abort via 1 certain INT instructions, as demonstrated by INT 0xAA; 2 an IRET instruction when an invalid address is at the top of the stack; 3 a malformed MOVNTI instruction, as demonstrated by using a register as a...

CVE-2007-1222

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...

CVE-2007-1222

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...

Directory traversal

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...

CVE-2007-1222

Vulnerability: Parallels Desktop for Mac before 20070216 allows a guest OS user to affect the host by exposing the entire host filesystem via the .psf share. Root cause: the Drag and Drop mechanism shares the host filesystem with the guest, enabling write access to host files. Impact: local guest...

CVE-2007-1222

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a...

Parallels - Drag and Drop Hidden Share

Parallels - Drag and Drop Hidden Share source: https://www.securityfocus.com/bid/22597/info Parallels is prone to an arbitrary code-execution vulnerability because of a design flaw in the affected application. An attacker can exploit this issue to create files in the host operating system. This...

Parallels - Drag and Drop Hidden Share

source: https://www.securityfocus.com/bid/22597/info Parallels is prone to an arbitrary code-execution vulnerability because of a design flaw in the affected application. An attacker can exploit this issue to create files in the host operating system. This could result in the execution of code...

CVE-2006-5817

prldhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions 0666 for /Library/Parallels/.dhcpdconfiguration, which allows local users to modify DHCP configuration...

CVE-2006-5817

prldhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions 0666 for /Library/Parallels/.dhcpdconfiguration, which allows local users to modify DHCP configuration...

CVE-2006-5817

The CVE-2006-5817 entry concerns Parallels Desktop for Mac Build 1940, where the prl_dhcpd service stores DHCP configuration in /Library/Parallels/.dhcpd_configuration with insecure permissions (0666). This permits local users to modify the DHCP configuration, representing a local-impact vulnerab...