CVE-2007-1222

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-02 · updated 2026-06-16

Description

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a LaunchAgents directory.

Affected products

Parallels Desktop: all versions

References

http://lists.immunitysec.com/pipermail/dailydave/2007-February/004091.html
http://osvdb.org/33799
http://secunia.com/advisories/24171
http://lists.immunitysec.com/pipermail/dailydave/2007-February/004091.html
http://osvdb.org/33799
http://secunia.com/advisories/24171

Get alerted when CVE-2007-1222 or the next vulnerability affects your stack