CVE-2013-4541

The usbdevicepostload function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setuplen or setupindex value...

PT-2014-2826

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue is related to the usb device post load function in hw/usb/bus.c, which might allow remote attackers to execute arbitrary code via a crafted savevm image. This is due to a negative setup len or...