← Vulnerability feed

Vulnerability record · CVE-2004-0115 · published 3 March 2004

CVE-2004-0115: Microsoft virtual pc vulnerability

Microsoft · Virtual Pc

VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.

4.6 CVSS 2.0 Medium EPSS 2.2% · top 18.0%
4.6CVSS 2.0 base score
2.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.atstake.com/research/advisories/2004/a021004-1.txt Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-076.shtml
http://www.osvdb.org/3893
http://www.securityfocus.com/bid/9632 PatchVendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-005
https://exchange.xforce.ibmcloud.com/vulnerabilities/15113
http://www.atstake.com/research/advisories/2004/a021004-1.txt Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-076.shtml
http://www.osvdb.org/3893
http://www.securityfocus.com/bid/9632 PatchVendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-005
https://exchange.xforce.ibmcloud.com/vulnerabilities/15113

Track CVE-2004-0115 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2010-1225Microsoft virtual pc permissions and access controls vulnerabilityThe memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server…EPSS 28%9.3CVE-2007-0948Microsoft virtual pc vulnerabilityHeap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administ…EPSS 12%9.0CVE-2009-1542Microsoft virtual pc permissions and access controls vulnerabilityThe Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CP…EPSS 8.0%

Source: NIST National Vulnerability Database (record CVE-2004-0115), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.