CVE-2007-0948: Buffer Overflow
First published: Tue Aug 14 2007(Updated: )
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Virtual PC | =6.1 | |
| Microsoft Virtual Server | =2005-r2 | |
| Microsoft Virtual PC | =2004 | |
| Microsoft Virtual PC | =7 | |
| Microsoft Virtual Server | =2005 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/25298
- http://www.securitytracker.com/id?1018567
- http://secunia.com/advisories/26444
- http://www.us-cert.gov/cas/techalerts/TA07-226A.html
- http://www.vupen.com/english/advisories/2007/2873
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/type
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft virtual pc
- version/microsoft virtual pc/6.1
- canonical/microsoft virtual server
- version/microsoft virtual server/2005-r2
- version/microsoft virtual pc/2004
- version/microsoft virtual pc/7
- version/microsoft virtual server/2005