EUVD-2013-4400

Malware in sbrugna...

CVE-2013-4541

The usbdevicepostload function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setuplen or setupindex value...

CVE-2013-4541

The usbdevicepostload function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setuplen or setupindex value...

CVE-2013-4541

CVE-2013-4541 affects QEMU: usb_device_post_load in hw/usb/bus.c (pre-1.7.2) may allow remote code execution via a crafted savevm image, due to a negative setup_len or setup_index. Affected: QEMU before 1.7.2. Impact: arbitrary code execution. Remediation: upgrade to 1.7.2 or newer. The documents...

CVE-2013-4541: Improper Restriction of Operations within the Bounds of a Memory Buffer

The usbdevicepostload function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setuplen or setupindex value...