Qemu · Qemu · CVE-2008-2004
**Name of the Vulnerable Software and Affected Versions**
QEMU version 0.9.1
**Description**
The issue allows local guest users to read arbitrary files on the host by modifying the header of a raw disk image to identify a different format. This is possible due to the `drive init` function in QEMU, which determines the format of a raw disk image based on the header. The modified header is used when the guest is restarted.
**Recommendations**
For QEMU version 0.9.1, as a temporary workaround, consider restricting access to the `drive init` function until a patch is available. Additionally, avoid using the raw disk image feature with untrusted guests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.