CVE-2010-0297: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the usbhosthandlecontrol function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service guest OS crash or hang or possibly execute arbitrary code on the host OS via a crafted USB packet...

PT-2010-2089 · Qemu +1 · Qemu +1

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 0.11.1 Description: A buffer overflow issue exists in the usb host handle control function within the USB passthrough handling implementation. This allows guest OS users to potentially cause a denial of service, such as...

DEBIAN-CVE-2009-3616

Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then 1 disconnecting during data transfer, 2 sending a message using incorrect integ...

PT-2009-5891 · Qemu · Qemu

Name of the Vulnerable Software and Affected Versions: QEMU versions 0.10.6 and earlier Description: The issue is related to multiple use-after-free vulnerabilities in the VNC server component of QEMU. These vulnerabilities might allow guest OS users to execute arbitrary code on the host OS. This...