CVE-2008-4539

The connected documents describe a heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) of QEMU, affecting versions prior to a certain fix. The CVE-2014-8106 entry specifies Cirrus VGA heap overflow in QEMU before 2.2.0 and notes it exists due to an incomplete fix for C...

CVE-2008-4539

Heap-based buffer overflow in the Cirrus VGA implementation in 1 KVM before kvm-82 and 2 QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorre...