VULNERABILITY INTELLIGENCE
CVE-2007-2454
CVSS score6.8 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2007-05-02
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:C/I:C/A:C
Description
Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations.