PT-2013-1377 · Qemu+1 · Libspice+1

Izik Eidus + 1 · Publicado 2010-03-29 · Atualizado 2013-12-27 · CVE-2010-0430

Positive Technologies (AI Summary)

CVSS v2.0

7.4

Alta

Vetor base

AV:A/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libspice versions prior to 5.5-2.2

Description The issue allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings. This can potentially lead to unauthorized access or modification of sensitive data.

Recommendations For versions prior to 5.5-2.2, update to version 5.5-2.2 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-0430

RHSA-2010:0271

RHSA-2010:0476

RHSA-2010_0271

Produtos afetados

Red Hat

Libspice

Referências · 7

• https://rhn.redhat.com/errata/RHSA-2010-0476.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2010-0741 · Nota
• http://rhn.redhat.com/errata/RHSA-2010-0271.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2010-0430 · Nota
• https://access.redhat.com/errata/RHSA-2010:0271 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=568702 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0430 · Nota de Segurança