CVE-2004-0115
First published: Wed Mar 03 2004(Updated: )
VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Virtual PC | =6.1 | |
| Microsoft Virtual PC | =6.2 | |
| Microsoft Virtual PC | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/9632
- http://www.atstake.com/research/advisories/2004/a021004-1.txt
- http://www.ciac.org/ciac/bulletins/o-076.shtml
- http://www.osvdb.org/3893
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15113
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-005
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft virtual pc
- version/microsoft virtual pc/6.1
- version/microsoft virtual pc/6.2
- version/microsoft virtual pc/6.0