UiltraISO multiple security vulnerabilities

Format string vulnerability via image filename. Buffer overflows on different disk image formats prasing...

xen security and bug fix update

3.0.3-64.el52.3 - Fix overflow in qemu-img rhbz 454651 3.0.3-64.el52.2 - Correctly limit PVFB size CVE-2008-1952 rhbz 447760 - Disable QEMU USB disk image format auto-detection CVE-2008-1945 rhbz 445845...

CVE-2008-1945

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004...

CVE-2008-1945

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004...

qemu/kvm/xen: qemu block format auto-detection vulnerability

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

CVE-2008-2004

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

CVE-2008-2004

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

DEBIAN-CVE-2008-2004

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

CVE-2008-2004

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

CVE-2008-2004

CVE-2008-2004 concerns QEMU up to 0.9.1 where drive_init determines the raw-disk image format from the header. By altering the header to identify a different format, a local guest user can cause the host to disclose arbitrary host files when the guest is restarted. The vulnerability is tied to QE...

CVE-2008-2004

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

CVE-2008-2004: Exposure of Sensitive Information to an Unauthorized Actor

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

qemu -- "drive_init()" Disk Format Security Bypass

Secunia reports: A vulnerability has been reported in QEMU, which can be exploited by malicious, local users to bypass certain security restrictions. The vulnerability is caused due to the "driveinit" function in vl.c determining the format of a disk from data contained in the disk's header. This...

Null pointer dereference

Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service crash via a crafted Universal Disc Format UDF disk image, which triggers a NULL pointer dereference...

CVE-2008-0999

Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service crash via a crafted Universal Disc Format UDF disk image, which triggers a NULL pointer dereference...

CVE-2008-0999

Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service crash via a crafted Universal Disc Format UDF disk image, which triggers a NULL pointer dereference...

CVE-2007-6537: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the zfilegunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted remote attackers to execute arbitrary code via a long filename in a gzipped archive, such as a 1 gz, 2 adz, 3 roz, or 4 hdz archive in a compressed floppy disk image...

WinUAE Amiga emulator buffer overflow

Buffer overflow on gzip'ed floppy disk image parsing...

CVE-2007-5853

Unspecified vulnerability in IO Storage Family in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service system shutdown or execute arbitrary code via a disk image with crafted GUID partition maps, which triggers memory corruption...

Memory corruption

Unspecified vulnerability in IO Storage Family in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service system shutdown or execute arbitrary code via a disk image with crafted GUID partition maps, which triggers memory corruption...