CVE-2004-0115

Published: Mar 3, 2004Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.

Affected (3)

Products: Microsoft: Virtual Pc

Microsoft

1 product

Virtual Pc

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Virtual Pc	Version 6.0
Microsoft Virtual Pc	Version 6.1
Microsoft Virtual Pc	Version 6.2

References (12)

http://www.atstake.com/research/advisories/2004/a021004-1.txt

Source: cve@mitre.org

Vendor Advisory

http://www.ciac.org/ciac/bulletins/o-076.shtml

Source: cve@mitre.org

http://www.osvdb.org/3893

Source: cve@mitre.org

http://www.securityfocus.com/bid/9632

Source: cve@mitre.org

PatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-005

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/15113

Source: cve@mitre.org

http://www.atstake.com/research/advisories/2004/a021004-1.txt