PT-2007-2727 · Qemu+1 · Qemu+1

Tavis Ormandy · Published 2007-05-02 · Updated 2024-06-15 · CVE-2007-1320

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QEMU version 0.8.2

Description The issue is related to multiple heap-based buffer overflows in the cirrus invalidate region function within the Cirrus VGA extension. This could potentially allow local users to execute arbitrary code through unspecified vectors related to attempting to mark non-existent regions as dirty.

Recommendations For QEMU version 0.8.2, consider applying a patch or updating to a newer version that addresses the heap-based buffer overflows in the cirrus invalidate region function. As a temporary workaround, restricting access to the Cirrus VGA extension might minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2007-1320

DSA-1284-1

DSA-1384-1

DTSA-133-1

DTSA-38-1

OPENSUSE-SU-2024:11520-1

RHSA-2007:0323

RHSA-2007_0323

Affected Products

Qemu

Red Hat

References · 127

• http://debian.org/security/2007/dsa-1384 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-May/msg00706.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1320 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:203 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:162 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2007-October/msg00082.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1320 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0323.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-1320 · Vendor Advisory
• http://debian.org/security/2007/dsa-1284 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-May/msg00935.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-1320 · Vendor Advisory
• https://suse.com/security/cve/CVE-2020-15565 · Note