CVE-2007-2454

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-05-02

Last modified

2024-08-07

Affected products

• Parallels Desktop (Parallels)

References

• http://osvdb.org/40228
• http://taviso.decsystem.org/virtsec.pdf