152 matches found
CVE-2013-2211
The libxenlight libxl toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for paravirtualised and emulated serial console devices, which allows local guest administrators to modify the xenstore value via unspecified vectors...
CVE-2013-2211
The libxenlight libxl toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for paravirtualised and emulated serial console devices, which allows local guest administrators to modify the xenstore value via unspecified vectors...
CVE-2013-2211
CVE-2013-2211 concerns the Xen hypervisor, where the libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions on xenstore keys for paravirtualised and emulated serial console devices. This allows a local guest administrator to modify the xenstore value via unspec...
VMWare privilege escalation
It's possible to manipulate emulated ROM via backdoor interface...
qemu-dm Local Privilege Escalation Vulnerability
ISSUE DESCRIPTION Heap-based buffer overflow in the processtxdesc function in the e1000 emulation allows the guest to cause a denial of service QEMU crash and possibly execute arbitrary code via crafted legacy mode packets. Upstream qemu has already released an advisory hence there is no embargo...
kernel: xen: svm: insufficiencies in handling emulated instructions during vm exits
The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service host crash by replacing the instruction that causes the VM to exit in one thread with a different instruction in a different thread...
GLSA-200711-21 : Bochs: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200711-21 Bochs: Multiple vulnerabilities Tavis Ormandy of the Google Security Team discovered a heap-based overflow vulnerability in the NE2000 driver CVE-2007-2893. He also discovered a divide-by-zero error in the emulated flopp...
Design/Logic Flaw
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error...
CVE-2007-2893
Heap-based buffer overflow in the bxne2kc::rxframe function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register...
CVE-2007-2894
CVE-2007-2894 affects Bochs 2.3’s emulated floppy disk controller. A local user inside the guest OS can trigger a divide-by-zero, causing a denial of service (virtual machine crash) via vectors not specified in the public description. Related advisories (Gentoo GLSA 200711-21, Fedora/OpenVAS entr...
Evading the Norman SandBox Analyzer
Hi all, Summary: The Norman SandBox Analyzer http://sandbox.norman.no/live.html runs malicious code samples in an emulated environment while logging their actions. In practice it is more or less impossible to make an emulated environment perfectly similar to the real thing. It is therefore possib...