CVE-2007-0948: Microsoft Virtual Pc

High severity, CVSS 9.3. EPSS: 12.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."

Affected products

• Microsoft Virtual Pc: version 6.1 only; version 7 only; version 2004 only
• Microsoft Virtual Server: version 2005 only

Published 2007-08-14. Last modified 2026-06-16.