Technical Information

Brief overview of the risk:
This is an elevation of privilege vulnerability. The vulnerability in Microsoft Virtual PC and Microsoft Virtual Server could allow a guest operating system user to run code on the host or another guest operating systems. Only guest operating system users who are granted administrative permissions to the guest operating system would be able to exploit this vulnerability. Guest operating system users not granted administrative permissions to the guest operating system would be unable to exploit this vulnerability.
Detailed Information on the risk:
An elevation of privilege vulnerability exists in Microsoft Virtual PC and Microsoft Virtual Server due to inaccurate initialization of components that communicate with the host operating system.Further information on this exploit is available at : MS07-049