NVD

Id
1880  
Name
CVE-2008-1944  
Description
Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-05-14  
Modified Date
2010-08-21  
Seq
2008-1944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12139 1880 CVE-2008-1944 oval:org.mitre.oval:def:10868  View
12140 1880 CVE-2008-1944 RHSA-2008:0194  View
12141 1880 CVE-2008-1944 29186  View
12142 1880 CVE-2008-1944 1020009  View
12143 1880 CVE-2008-1944 xen-pvfb-message-dos(42388)  View
12144 1880 CVE-2008-1944 https://bugzilla.redhat.com/show_bug.cgi?id=443390  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46053 JVNDB-2008-001363 Xen の Para Virtualized Frame Buffer (PVFB) による”偽のスクリーン更新”処理におけるバッファオーバーフローの脆弱性 Xen の Para Virtualized Frame Buffer (PVFB) メッセージには、”偽のスクリーン更新” のメッセージの検証に関連するバッファオーバーフローの脆弱性が存在します。 CVE-2008-1944 32057 CVE-2008-1944 1880 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001363.html 2008-05-13 2008-06-24 View