CVE-2007-0948
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual...
CVE-2007-0948 is a high vulnerability (CVSS 9.3) in Microsoft Virtual Pc, published August 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.1%, the 96th percentile. No source names a fixed version.
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
- Record
CVE-2007-0948- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
- Record
CVE-2007-0948- Updated
- 2026-11-02
EUVDEUVD-2007-0942 No score
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
- Record
EUVD-2007-0942- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jfrq-8chx-4c7q No score
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual...
Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."
- Record
GHSA-jfrq-8chx-4c7q- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259
us-cert.gov/cas/techalerts/TA07-226A.html
securitytracker.com/id?1018567
vupen.com/english/advisories/2007/2873
securityfocus.com/bid/25298
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049
secunia.com/advisories/26444
nvd.nist.gov/vuln/detail/CVE-2007-0948
github.com/advisories/GHSA-jfrq-8chx-4c7q