CVE

Id
64488  
CVE No.
CVE-2013-4541  
Status
Candidate  
Description
The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635636 64488 CVE-2013-4541 MLIST:[Qemu-stable] 20140723 [ANNOUNCE] QEMU 1.7.2 Stable released  View
635637 64488 CVE-2013-4541 URL:http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html  View
635638 64488 CVE-2013-4541 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f8e9895c504149d7048e9fc5eb5cbb34b16e49a  View
635639 64488 CVE-2013-4541 FEDORA:FEDORA-2014-6288  View
635640 64488 CVE-2013-4541 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html  View
635641 64488 CVE-2013-4541 REDHAT:RHSA-2014:0743  View
635642 64488 CVE-2013-4541 URL:http://rhn.redhat.com/errata/RHSA-2014-0743.html  View
635643 64488 CVE-2013-4541 REDHAT:RHSA-2014:0744  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24864 JVNDB-2013-006439 GitLab で使用される gitlab-shell のリポジトリのインポート機能における任意のコマンドを実行される脆弱性 GitLab で使用される gitlab-shell のリポジトリのインポート機能には、任意のコマンドを実行される脆弱性が存在します。 CVE-2013-4546 64488 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006439.html  View