Bochs: Multiple vulnerabilities

Background Bochs is a IA-32 x86 PC emulator written in C++. Description Tavis Ormandy of the Google Security Team discovered a heap-based overflow vulnerability in the NE2000 driver CVE-2007-2893. He also discovered a divide-by-zero error in the emulated floppy disk controller CVE-2007-2894. Impa...

Fedora 7 : bochs-2.3-7.fc7 (2007-1778)

This security update of bochs fixes CVE-2007-2894 : The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error. Note that Tenable Network Security...

Fedora 7 : bochs-2.3-5.fc7 (2007-1153)

This security update fixes a bochs buffer overflow which can be triggered by code running inside bochs CVE-2007-2893. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

[SECURITY] Fedora 7 Update: bochs-2.3-7.fc7

Bochs is a portable x86 PC emulation software package that emulates enough of the x86 CPU, related AT hardware, and BIOS to run DOS, Windows '95, Minix 2.0, and other OS's, all on your workstation...

Debian DSA-1351-1 : bochs - buffer overflow

Tavis Ormandy discovered that bochs, a highly portable IA-32 PC emulator, is vulnerable to a buffer overflow in the emulated NE2000 network device driver, which may lead to privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

bochs IA-32 emulator privilege escalation

Buffer overflow in network adapter emulation...

[SECURITY] [DSA 1351-] New bochs packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1351-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 7th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1351-] New bochs packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1351-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 7th, 2007 http://www.debian.org/security/faq -...

DSA-1351-1 bochs - buffer overflow

Bulletin has no description...

[SECURITY] Fedora 7 Update: bochs-2.3-5.fc7

Bochs is a portable x86 PC emulation software package that emulates enough of the x86 CPU, related AT hardware, and BIOS to run DOS, Windows '95, Minix 2.0, and other OS's, all on your workstation...

Bochs 2.3 - Buffer Overflow (Denial of Service) (PoC)

Bochs 2.3 - Buffer Overflow Denial of Service PoC // source: https://www.securityfocus.com/bid/24246/info Bochs is prone to a heap-based buffer-overflow issue and a denial-of-service issue. The buffer-overflow issue occurs because the application fails to bounds-check user-supplied data before...

Bochs 2.3 - Buffer Overflow (Denial of Service) (PoC)

// source: https://www.securityfocus.com/bid/24246/info Bochs is prone to a heap-based buffer-overflow issue and a denial-of-service issue. The buffer-overflow issue occurs because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized memory buffe...

Heap overflow

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...

CVE-2007-2894

The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error...

DEBIAN-CVE-2007-2893

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...

CVE-2007-2894

The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error...

CVE-2007-2894

The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error...

CVE-2007-2893

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...

DEBIAN-CVE-2007-2894

The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error...

CVE-2007-2893

Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...