CVE-2007-0948
high · 9.3Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
9.3
CVSS
12.1%
EPSS (exploit prob.)
96th
EPSS percentile
2007-08-14
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | virtual_pc | 6.1 |
| microsoft | virtual_pc | 7 |
| microsoft | virtual_pc | 2004 |
| microsoft | virtual_server | 2005 |
| microsoft | virtual_server | 2005 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/26444
- http://www.securityfocus.com/bid/25298
- http://www.securitytracker.com/id?1018567
- http://www.us-cert.gov/cas/techalerts/TA07-226A.html
- http://www.vupen.com/english/advisories/2007/2873
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259
- http://secunia.com/advisories/26444
- http://www.securityfocus.com/bid/25298
- http://www.securitytracker.com/id?1018567
- http://www.us-cert.gov/cas/techalerts/TA07-226A.html
- http://www.vupen.com/english/advisories/2007/2873
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-0948