Vulnerability Details : CVE-2007-0948
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
Vulnerability category: OverflowExecute code
Products affected by CVE-2007-0948
- cpe:2.3:a:microsoft:virtual_pc:6.1:*:mac:*:*:*:*:*
- cpe:2.3:a:microsoft:virtual_pc:2004:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:virtual_pc:7:*:mac:*:*:*:*:*
- cpe:2.3:a:microsoft:virtual_server:2005:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:virtual_server:2005:r2:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2007-0948
53.80%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2007-0948
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
References for CVE-2007-0948
-
http://www.securitytracker.com/id?1018567
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049
-
http://secunia.com/advisories/26444
Vendor Advisory
-
http://www.securityfocus.com/bid/25298
Patch
-
http://www.us-cert.gov/cas/techalerts/TA07-226A.html
US Government Resource
-
http://www.vupen.com/english/advisories/2007/2873
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259
Jump to