CVE-2008-2004

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

CVE-2008-2004

CVE-2008-2004 concerns QEMU up to 0.9.1 where drive_init determines the raw-disk image format from the header. By altering the header to identify a different format, a local guest user can cause the host to disclose arbitrary host files when the guest is restarted. The vulnerability is tied to QE...