Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2007-2454

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations.

  • Published: May 2, 2007
  • Updated: Nov 9, 2025
  • CVE: CVE-2007-2454
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:L/AC:L/Au:S/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
parallels / parallels_desktop - -