Vulnerability record · CVE-2007-0948 · published 14 August 2007

CVE-2007-0948: Microsoft virtual pc vulnerability

Microsoft · Virtual Pc

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."

9.3 CVSS 2.0 High EPSS 12% · top 4.0%

9.3CVSS 2.0 base score

12%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

14References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Virtual Pc Microsoft

Virtual Server Microsoft

References

Link	Tags
http://secunia.com/advisories/26444	Vendor Advisory
http://www.securityfocus.com/bid/25298	Patch
http://www.securitytracker.com/id?1018567
http://www.us-cert.gov/cas/techalerts/TA07-226A.html	US Government Resource
http://www.vupen.com/english/advisories/2007/2873
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259
http://secunia.com/advisories/26444	Vendor Advisory
http://www.securityfocus.com/bid/25298	Patch
http://www.securitytracker.com/id?1018567
http://www.us-cert.gov/cas/techalerts/TA07-226A.html	US Government Resource
http://www.vupen.com/english/advisories/2007/2873
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259

Track CVE-2007-0948 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2010-1225Microsoft virtual pc permissions and access controls vulnerabilityThe memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server…EPSS 28%1 Apr 2010 9.0CVE-2009-1542Microsoft virtual pc permissions and access controls vulnerabilityThe Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CP…EPSS 8.0%15 Jul 2009 4.6CVE-2004-0115Microsoft virtual pc vulnerabilityVirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbi…EPSS 2.2%3 Mar 2004

Source: NIST National Vulnerability Database (record CVE-2007-0948), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.