qemu -- denial of service vulnerability in VNC

Prasad J Pandit, Red Hat Product Security Team, reports:

Qemu emulator built with the VNC display driver support is
vulnerable to an arithmetic exception flaw. It occurs on the VNC
server side while processing the ‘SetPixelFormat’ messages from a
client.
A privileged remote client could use this flaw to crash the guest
resulting in DoS.