CVE-2014-3689

Debian Bug report logs - #765496 CVE-2014-3689: insufficient parameter validation in vmware_vga rectangle functions Package: qemu-system-x86; Maintainer for qemu-system-x86 is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu-system-x86 is src:qemu (PTS, buildd, popcon) Reported by: Michael Tokarev & ...

Several security issues were fixed in QEMU ...

Several vulnerabilities were discovered in qemu, a fast processor emulator CVE-2014-3689 The Advanced Threat Research team at Intel Security reported that guest provided parameter were insufficiently validated in rectangle functions in the vmware-vga driver A privileged guest user could use this flaw to write into qemu address sp ...

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware CVE-2014-3689 The Advanced Threat Research team at Intel Security reported that guest provided parameter were insufficiently validated in rectangle functions in the vmware-vga driver A privileged guest user could use this flaw to w ...

The vmware-vga driver (hw/display/vmware_vgac) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling ...