CVE-2004-0115 VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices...

MediumCVSS 4.6 EPSS 2.2%

Published: 2004-09-01 07:00
Updated: 2026-06-17 01:04
Exploit status: No public exploit known

Description

VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.

Affected products

Product	Affected versions	Fixed in
Microsoft virtual pc	= 6.0	No fix listed
Microsoft virtual pc	= 6.1	No fix listed
Microsoft virtual pc	= 6.2	No fix listed

References

A021004-1 vendor-advisory
O-076 government-resource third-party-advisory
3893 vdb-entry
9632 patch vdb-entry vendor-advisory
MS04-005 vendor-advisory
virtual-pc-gain-privileges(15113) vdb-entry

CVSS v2.0

4.6 Medium

AV:L/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Local
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.23% (percentile 83.0)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.