Qemu · Qemu · CVE-2013-4538
**Name of the Vulnerable Software and Affected Versions**
QEMU versions prior to 1.7.2
**Description**
The issue is related to multiple buffer overflows in the `ssd0323 load` function, which can be triggered by crafted values in a savevm image, including `cmd len`, `row`, `col`, `row start`, `row end`, `col start`, and `col end`. This can cause a denial of service due to memory corruption or possibly allow the execution of arbitrary code.
**Recommendations**
For QEMU versions prior to 1.7.2, update to version 1.7.2 or later to resolve the issue.