Lucene search

K
cveMicrosoftCVE-2007-0948
HistoryAug 14, 2007 - 10:17 p.m.

CVE-2007-0948

2007-08-1422:17:00
microsoft
web.nvd.nist.gov
23
microsoft
virtual pc
buffer overflow
security vulnerability
cve-2007-0948
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.171

Percentile

96.2%

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to β€œinteraction and initialization of components.”

Affected configurations

Nvd
Node
microsoftvirtual_pcMatch6.1mac
OR
microsoftvirtual_pcMatch7mac
OR
microsoftvirtual_pcMatch2004
OR
microsoftvirtual_serverMatch2005
OR
microsoftvirtual_serverMatch2005r2
VendorProductVersionCPE
microsoftvirtual_pc6.1cpe:2.3:a:microsoft:virtual_pc:6.1:*:mac:*:*:*:*:*
microsoftvirtual_pc7cpe:2.3:a:microsoft:virtual_pc:7:*:mac:*:*:*:*:*
microsoftvirtual_pc2004cpe:2.3:a:microsoft:virtual_pc:2004:*:*:*:*:*:*:*
microsoftvirtual_server2005cpe:2.3:a:microsoft:virtual_server:2005:*:*:*:*:*:*:*
microsoftvirtual_server2005cpe:2.3:a:microsoft:virtual_server:2005:r2:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.171

Percentile

96.2%