Vulnerability in Microsoft Virtual Pc
CVE-2004-0115
VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.
EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Virtual_pc — versions 6.0, 6.1, 6.2
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (x_refsource_ATSTAKE, vendor-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
Frequently asked questions
- What is CVE-2004-0115?
- CVE-2004-0115 is a vulnerability in Microsoft Virtual Pc. Published 2004-03-03.
- Is CVE-2004-0115 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.