CVE-2007-0948

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/25298	Patch
http://www.securitytracker.com/id?1018567
http://secunia.com/advisories/26444	Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA07-226A.html	US Government Resource
http://www.vupen.com/english/advisories/2007/2873
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:virtual_server:2005:::::::*
	cpe:2.3:a:microsoft:virtual_server:2005:r2::::::
	cpe:2.3:a:microsoft:virtual_pc:2004:::::::*
	cpe:2.3:a:microsoft:virtual_pc:6.1::mac:::::
	cpe:2.3:a:microsoft:virtual_pc:7::mac:::::

Information

Published : 2007-08-14 15:17

Updated : 2018-10-12 14:43

NVD link : CVE-2007-0948

Mitre link : CVE-2007-0948

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

microsoft

virtual_server
virtual_pc

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/25298", "name": "25298", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id?1018567", "name": "1018567", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/26444", "name": "26444", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-226A.html", "name": "TA07-226A", "tags": ["US Government Resource"], "refsource": "CERT"}, {"url": "http://www.vupen.com/english/advisories/2007/2873", "name": "ADV-2007-2873", "tags": [], "refsource": "VUPEN"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259", "name": "oval:org.mitre.oval:def:1259", "tags": [], "refsource": "OVAL"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049", "name": "MS07-049", "tags": [], "refsource": "MS"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to \"interaction and initialization of components.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-0948", "ASSIGNER": "secure@microsoft.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2007-08-14T22:17Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:virtual_server:2005:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:virtual_server:2005:r2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:virtual_pc:2004:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:virtual_pc:6.1:*:mac:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:virtual_pc:7:*:mac:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-12T21:43Z"}