kernel security update

CentOS Errata and Security Advisory CESA-2007:0347 Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...

Information disclosure

VMware Workstation before 5.5.4 allows attackers to cause a denial of service against the guest OS by causing the virtual machine process VMX to store malformed configuration information...

CVE-2007-1337

The virtual machine process VMX in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows attackers to cause a denial of service virtual machine reboot via unknown vectors...

CVE-2007-1069

The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service Windows virtual machine crash by triggering certain general protection faults GPF...

Memory corruption

The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service Windows virtual machine crash by triggering certain general protection faults GPF...

Design/Logic Flaw

The virtual machine process VMX in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows attackers to cause a denial of service virtual machine reboot via unknown vectors...

CVE-2007-1876

VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt the virtual machine's register context" by debugging a local program and stepping into a "syscall instruction."...

CVE-2007-1069

The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service Windows virtual machine crash by triggering certain general protection faults GPF...

CVE-2007-2454

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations...

Heap overflow

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations...

DEBIAN-CVE-2007-1366

QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error...

CVE-2007-1322

QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction...

CVE-2007-1366

QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error...

DEBIAN-CVE-2007-1322

QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction...

CVE-2007-1322

QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction...

CVE-2007-1322

QEMU 0.8.2 is affected by CVE-2007-1322: local users can halt a VM by executing the icebp instruction. Mandriva’s advisory MDVSA-2008:162 notes that updated packages fix these issues; the Tenable/NASL entries confirm this CVE is among multiple vulnerabilities in the 0.8.2 release. No exploit deta...

CVE-2007-1366

QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error...

CVE-2007-2454

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations...

CVE-2007-1366

CVE-2007-1366 concerns QEMU 0.8.2. The vulnerability allows a local attacker to crash the guest VM by abusing the aam instruction divisor operand (e.g., aam 0x0), causing a divide-by-zero. The likely impact is a VM crash (partial availability) with no explicit remote code execution detailed in th...

CVE-2007-1366

QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error...