Unscored severity · published Mar 2, 2007
CVE-2007-1222
Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a LaunchAgents directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PD
Parallels Desktop · Parallels
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1222
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1222
lists.immunitysec.com
http://lists.immunitysec.com/pipermail/dailydave/2007-February/004091.html
osvdb.org
http://osvdb.org/33799
secunia.com
http://secunia.com/advisories/24171
More from Parallels Desktop
10.0
CVE-2024-6240
Improper privilege management vulnerability in Parallels Desktop
9.8
CVE-2024-34331
A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels…
8.8
CVE-2025-31359
A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879)
8.8
CVE-2022-34890
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537)
8.8
CVE-2021-34864
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160)