CVE-2007-0948

Microsoft Virtual PC <7.1-2005 R2 - Buffer Overflow

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-226A.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018567
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2873
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25298
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26444

Scores

EPSS 0.1213
EPSS Percentile 95.7%

Details

Status published
Products (4)
microsoft/virtual_pc 6.1
microsoft/virtual_pc 7
microsoft/virtual_pc 2004
microsoft/virtual_server 2005 (2 CPE variants)
Published Aug 14, 2007
Tracked Since Feb 18, 2026