NVD

Id
53510  
Name
CVE-2007-1320  
Description
Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-02  
Modified Date
2012-11-05  
Seq
2007-1320  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
270989 53510 CVE-2007-1320 SUSE-SR:2009:002  View
270990 53510 CVE-2007-1320 oval:org.mitre.oval:def:10315  View
270991 53510 CVE-2007-1320 http://taviso.decsystem.org/virtsec.pdf  View
270992 53510 CVE-2007-1320 DSA-1284  View
270993 53510 CVE-2007-1320 DSA-1384  View
270994 53510 CVE-2007-1320 MDKSA-2007:203  View
270995 53510 CVE-2007-1320 MDVSA-2008:162  View
270996 53510 CVE-2007-1320 RHSA-2007:0323  View
270997 53510 CVE-2007-1320 23731  View
270998 53510 CVE-2007-1320 ADV-2007-1597  View
270999 53510 CVE-2007-1320 FEDORA-2007-713  View
271000 53510 CVE-2007-1320 FEDORA-2008-4386  View
271001 53510 CVE-2007-1320 FEDORA-2008-4604  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52068 JVNDB-2007-000731 QEMU Cirrus VGA 拡張の cirrus_invalidate_region() 関数における複数のヒープオーバーフローの脆弱性 QEMU の Cirrus VGA 拡張における cirrus_invalidate_region() 関数には、複数のヒープベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-1320 24675 CVE-2007-1320 53510 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000731.html 2007-05-02 2007-12-05 View