PT-2013-1377 · Qemu+1 · Libspice+1

Izik Eidus + 1 · Published 2010-03-29 · Updated 2013-12-27 · CVE-2010-0430

Positive Technologies (AI Summary)

CVSS v2.0

7.4

High

Base vector

AV:A/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libspice versions prior to 5.5-2.2

Description The issue allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings. This can potentially lead to unauthorized access or modification of sensitive data.

Recommendations For versions prior to 5.5-2.2, update to version 5.5-2.2 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-0430

RHSA-2010:0271

RHSA-2010:0476

RHSA-2010_0271

Affected Products

Red Hat

Libspice

References · 7

• https://rhn.redhat.com/errata/RHSA-2010-0476.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2010-0271.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0430 · Security Note
• https://access.redhat.com/security/cve/CVE-2010-0741 · Note
• https://access.redhat.com/security/cve/CVE-2010-0430 · Note
• https://access.redhat.com/errata/RHSA-2010:0271 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=568702 · Note