Vulnerability Details : CVE-2004-0115

VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.

Vulnerability category: Execute code

Published 2004-03-03 05:00:00

Updated 2018-10-12 21:33:53

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2004-0115

Probability of exploitation activity in the next 30 days: 0.10%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 39 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2004-0115

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	[email protected]
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2004-0115

Products affected by CVE-2004-0115

Microsoft » Virtual Pc » Version: 6.2 MAC Edition
cpe:2.3:a:microsoft:virtual_pc:6.2:*:mac:*:*:*:*:*
Matching versions
Microsoft » Virtual Pc » Version: 6.0 MAC Edition
cpe:2.3:a:microsoft:virtual_pc:6.0:*:mac:*:*:*:*:*
Matching versions
Microsoft » Virtual Pc » Version: 6.1 MAC Edition
cpe:2.3:a:microsoft:virtual_pc:6.1:*:mac:*:*:*:*:*
Matching versions