Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.2
CVSSv2

CVE-2007-1320

Published: 02/05/2007 Updated: 15/12/2020
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Qemu

Vulnerability Summary

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

qemu qemu 0.8.2

fedoraproject fedora 8

fedoraproject fedora 9

fedoraproject fedora core 6

opensuse opensuse 11.0

opensuse opensuse 11.1

debian debian linux 3.1

debian debian linux 4.0

Vendor Advisories

Debian CVElist Bug Report Logs: kvm: CVE-2008-2004 allows unauthorized disclosure of information
Debian Bug report logs - #481204 kvm: CVE-2008-2004 allows unauthorized disclosure of information Package: kvm; Maintainer for kvm is (unknown); Reported by: Nico Golde <nion@debianorg> Date: Wed, 14 May 2008 14:12:01 UTC Severity: grave Tags: patch, security Fixed in version kvm/66+dfsg-11 Done: Steffen Joeris <whi ...
Debian CVElist Bug Report Logs: qemu: CVE-2008-4539 buffer overlflow vulnerability
Debian Bug report logs - #526040 qemu: CVE-2008-4539 buffer overlflow vulnerability Package: qemu; Maintainer for qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu is src:qemu (PTS, buildd, popcon) Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom> Date: Tue, 28 Apr 2009 ...
Debian CVElist Bug Report Logs: security issues not fixed in qemu in unstable
Debian Bug report logs - #424070 security issues not fixed in qemu in unstable Package: qemu; Maintainer for qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu is src:qemu (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Tue, 15 May 2007 16:48:01 UTC Severity: ...
Debian CVElist Bug Report Logs: qemu: CVE-2008-0928 privilege escalation
Debian Bug report logs - #469649 qemu: CVE-2008-0928 privilege escalation Package: qemu; Maintainer for qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu is src:qemu (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Thu, 6 Mar 2008 11:18:04 UTC Severity: importan ...
Debian Security Advisories: DSA-1284-1 qemu -- several vulnerabilities
Several vulnerabilities have been discovered in the QEMU processor emulator, which may lead to the execution of arbitrary code or denial of service The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-1320 Tavis Ormandy discovered that a memory management routine of the Cirrus video driver performs ...

References

CWE-787http://taviso.decsystem.org/virtsec.pdfhttp://www.debian.org/security/2007/dsa-1284http://www.securityfocus.com/bid/23731http://secunia.com/advisories/25073http://secunia.com/advisories/25095http://www.debian.org/security/2007/dsa-1384https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.htmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:203http://www.redhat.com/support/errata/RHSA-2007-0323.htmlhttp://secunia.com/advisories/27085http://secunia.com/advisories/27103http://secunia.com/advisories/27486http://secunia.com/advisories/27047https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00706.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-May/msg00935.htmlhttp://secunia.com/advisories/30413http://www.mandriva.com/security/advisories?name=MDVSA-2008:162http://secunia.com/advisories/29129http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.htmlhttp://secunia.com/advisories/33568http://www.vupen.com/english/advisories/2007/1597http://osvdb.org/35494https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10315https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481204https://www.debian.org/security/./dsa-1284
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook