CVE-2007-0948

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-14 · updated 2026-06-16

Description

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."

Affected products

Microsoft Virtual Pc: 6.1, 7, 2004
Microsoft Virtual Server: 2005, 2005-r2

References

http://secunia.com/advisories/26444
http://www.securityfocus.com/bid/25298
http://www.securitytracker.com/id?1018567
http://www.us-cert.gov/cas/techalerts/TA07-226A.html
http://www.vupen.com/english/advisories/2007/2873
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259
http://secunia.com/advisories/26444
http://www.securityfocus.com/bid/25298
http://www.securitytracker.com/id?1018567
http://www.us-cert.gov/cas/techalerts/TA07-226A.html
http://www.vupen.com/english/advisories/2007/2873

Get alerted when CVE-2007-0948 or the next vulnerability affects your stack