Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

alfredo ortega vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-1945
QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-20...
Qemu Qemu 0.9.0Opensuse Opensuse 10.3Opensuse Opensuse 11.0Opensuse Opensuse 11.1Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Debian Debian Linux 4.0Debian Debian Linux 5.0Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 8.10Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Eus 5.2Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 5.0
NA
CVE-2008-2004
The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.
Qemu Qemu 0.9.1
NA
CVE-2008-2382
The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and previous versions and (2) KVM kvm-79 and previous versions allows remote malicious users to cause a denial of service (infinite loop) via a certain message.
Qemu Qemu 0.8.0Qemu Qemu 0.7.2Qemu Qemu 0.5.3Qemu Qemu 0.5.2Qemu QemuQemu Qemu 0.3.0Qemu Qemu 0.2.0Qemu Qemu 0.1.4Qemu Qemu 0.7.1Qemu Qemu 0.7.0Qemu Qemu 0.5.1Qemu Qemu 0.5.0Qemu Qemu 0.1.1Qemu Qemu 0.1.2Qemu Qemu 0.8.2Qemu Qemu 0.8.1Qemu Qemu 0.5.5Qemu Qemu 0.5.4Qemu Qemu 0.4.1Qemu Qemu 0.4.0Qemu Qemu 0.1.6Qemu Qemu 0.1.3
NA
CVE-2008-4539
Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this iss...
Kvm Qumranet KvmQemu QemuCanonical Ubuntu Linux 8.10Canonical Ubuntu Linux 8.04Debian Debian Linux 5.0Debian Debian Linux 4.0
NA
CVE-2008-5714
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote malicious users to guess the VNC password, which is limited to seven characters where eight was intended.
Qemu Qemu 0.9.1
NA
CVE-2008-1136
The Utils::runScripts function in src/utils.cpp in vdccm 0.92 up to and including 0.10.0 in SynCE (SynCE-dccm) allows remote malicious users to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679.
Synce Synce 0.10.0Synce Synce 0.92
NA
CVE-2008-2542
Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-assisted remote malicious users to execute arbitrary code via a crafted PNM file.
Nasa Ames Research Center Bigview 1.8
NA
CVE-2007-1365
Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote malicious users to execute arbitrary code via fragmented IPv6 packets due to "incorrect mbuf handling for ICMP6 packets." NOTE: this was originally reported as a denial of service.
Openbsd Openbsd 4.0Openbsd Openbsd 3.9
NA
CVE-2008-0986
Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and previous versions, and m5-rc14, allows remote malicious users to execute arbitrary code via a crafted BMP file with a header containing a negative offset field.
Google Android Sdk M5-rc14Google Android Sdk
NA
CVE-2008-0985
Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and previous versions allows remote malicious users to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height an...
Google Android Sdk M3-rc37a
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook