Design/Logic Flaw

libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image...

CVE-2015-7311

CVE-2015-7311 affects Xen’s libxl when using the qemu-xen device model; Xen 4.1.x–4.6.x did not properly enforce the readonly flag on disks, allowing local guest users to write to a read-only disk image. Public advisories (GLSA-2016-04, openSUSE/SUSE advisories) list this vulnerability among seve...

CVE-2015-7311

libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image...

CVE-2015-1337

Simple Streams simplestreams does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 aka Forbidden response...

Vulnerabilities of iOS and Mac OS X operating systems, which allow attackers to escalate their privileges or cause service failures

The vulnerability of the DiskImages component in iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures by using a poorly crafted DMG file...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to increase their privileges or cause service failures

The vulnerability of the UDF component in the Mac OS X operating system is related to deficiencies in access control for files. Exploiting this vulnerability can allow an intruder to enhance their privileges or cause service failures due to a poorly crafted DMG file...

Apple OS X DMG File Handling Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. Apple OS X suffers from a memory corruption vulnerability in the handling of special DMG files, which allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by an application and can be...

Apple iOS DMG File Handling Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability in the handling of DMG files in Apple iOS allows local attackers to exploit the vulnerability to construct special files that can be tricked into parsing by the user, whi...

Apple iO Disk Image Processing Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a security vulnerability in the handling of disk files that allows attackers to build malicious applications and gain access to the kernel layout...

TestDisk 6.14 - Check_OS2MB Stack Buffer Overflow (PoC)

TestDisk 6.14 - CheckOS2MB Stack Buffer Overflow PoC , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. TestDisk 6.14 CheckOS2MB Stack Buffer Overflow Affected versions: TestDisk 6.14 - Linux, Windows...

testdisk -- buffer overflow with malicious disk image

CGSecurity TestDisk Changelog reports: Various fix including security fix, thanks to: Coverity scan Static Analysis of source code afl-fuzz security-oriented fuzzer. Denis Andzakovic from Security Assessment for reporting an exploitable Stack Buffer Overflow. Denis Andzakovic reports: A buffer...

Mandriva Linux Security Advisory : qemu (MDVSA-2015:061)

Updated qemu packages fix multiple security vulnerabilities : Sibiao Luo discovered that QEMU incorrectly handled device hot-unplugging. A local user could possibly use this flaw to cause a denial of service CVE-2013-4377. Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3 device...

CVE-2015-1062

MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to create folders in arbitrary filesystem locations via a crafted app...

CVE-2015-1062

MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to create folders in arbitrary filesystem locations via a crafted app...

CVE-2015-1062

CVE-2015-1062 affects MobileStorageMounter in iOS before 8.2 and Apple TV before 7.1, where invalid disk-image folders were not deleted due to an issue in the developer disk mounting logic. This allowed a crafted app to create folders in arbitrary filesystem locations. Apple released fixes in iOS...

MGASA-2014-0426 Updated qemu packages fix multiple security vulnerabilities

Updated qemu packages fix security vulnerabilities: Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3 devices. A local guest could possibly use this issue to cause a denial of service, or possibly execute arbitrary code on the host CVE-2013-4544. Multiple integer overflow, input...

Qemu: qcow1: validate image size to avoid out-of-bounds memory access

An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with...

Qemu: qcow1: validate L2 table size to avoid integer overflows

An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20140819)

Two integer overflow flaws were found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use either of these flaws to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Updated qemu-kvm-rhev packages that fix two security issues and one bug are now available for Red Hat Enterprise Virtualization. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...