CVE-2014-8106 in QEMU

Resumen (Inglés)

Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2014-10-10

Divulgación

2014-12-08

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
68346	Fabrice Bellard QEMU cirrus_vga.c desbordamiento de búfer	119	No probado	Arreglo oficial	CVE-2014-8106

Fuentes

• MITRE
• NVD
• CVE Details