CVE-2016-3710 in Xen
Summary
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS users to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 87131 | XenSource Xen Qemu VGA access control | 284 | Unproven | Official fix | CVE-2016-3710 |
Reservation
03/30/2016
Disclosure
05/11/2016
Status
Confirmed
Entries
1