CVE-2008-2004 in QEMU

Zusammenfassung

von MITRE

The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservieren: 28.04.2008
• Veröffentlichung: 12.05.2008
• Moderieren: akzeptiert
• Eintrag: VDB-42316
• CPE: bereit
• CWE: CWE-200 (bestätigt)
• CVSS: 6.2 (VulDB)
• EPSS: 0.00093
• KEV: nein
• Aktivitäten: very low
• Sektor: Education, Government, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-2004
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-2004
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-2004/