CVE-2008-1945 in QEMU

Summary

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 04/24/2008
• Disclosure: 08/08/2008
• Moderation: VulDB entry created
• Entries: VDB-43586 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 6.2
• EPSS: 0.00090
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-1945
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-1945
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-1945/