NVD

Id
11986  
Name
CVE-2010-0430  
Description
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.  
Reject
 
CVSS Version
2  
CVSS Score
7.4  
Severity
High  
CVSS Base Score
7.4  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-12-26  
Modified Date
2013-12-27  
Seq
2010-0430  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66109 11986 CVE-2010-0430 RHSA-2010:0271  View
66110 11986 CVE-2010-0430 https://bugzilla.redhat.com/show_bug.cgi?id=568702  View
66111 11986 CVE-2010-0430 RHSA-2010:0476  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39870 JVNDB-2010-005655 Red Hat Enterprise Virtualization Hypervisor などの製品で使用される libspice における任意の QEMU メモリを読まれるまたは書き込まれる脆弱性 Red Hat Enterprise Virtualization Hypervisor (別名 RHEV-H または rhev-hypervisor) の QEMU-KVM およびその他の製品で使用される libspice には、任意の QEMU メモリを読まれるまたは書き込まれる脆弱性が存在します。 CVE-2010-0430 43010 CVE-2010-0430 11986 7.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005655.html 2010-03-30 2014-01-06 View