CVE-2007-0948 : Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."

Published 2007-08-14 22:17:00

Updated 2025-04-09 00:30:58

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2007-0948

Microsoft » Virtual Pc » Version: 6.1 MAC Edition
cpe:2.3:a:microsoft:virtual_pc:6.1:*:mac:*:*:*:*:*
Matching versions
Microsoft » Virtual Pc » Version: 2004
cpe:2.3:a:microsoft:virtual_pc:2004:*:*:*:*:*:*:*
Matching versions
Microsoft » Virtual Pc » Version: 7 MAC Edition
cpe:2.3:a:microsoft:virtual_pc:7:*:mac:*:*:*:*:*
Matching versions
Microsoft » Virtual Server » Version: 2005
cpe:2.3:a:microsoft:virtual_server:2005:*:*:*:*:*:*:*
Matching versions
Microsoft » Virtual Server » Version: 2005 Update R2
cpe:2.3:a:microsoft:virtual_server:2005:r2:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-0948

EPSS FAQ

53.80%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-0948

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2007-0948

Jump to

Vulnerability Details : CVE-2007-0948

Products affected by CVE-2007-0948

Exploit prediction scoring system (EPSS) score for CVE-2007-0948

CVSS scores for CVE-2007-0948

References for CVE-2007-0948