NVD

Id
57786  
Name
CVE-2007-5729  
Description
The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0_TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the mtu overflow vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-30  
Modified Date
2011-03-07  
Seq
2007-5729  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
295716 57786 CVE-2007-5729 SUSE-SR:2009:002  View
295717 57786 CVE-2007-5729 http://taviso.decsystem.org/virtsec.pdf  View
295718 57786 CVE-2007-5729 20071030 Clarification on old QEMU/NE2000/Xen issues  View
295719 57786 CVE-2007-5729 DSA-1284  View
295720 57786 CVE-2007-5729 MDKSA-2007:203  View
295721 57786 CVE-2007-5729 MDVSA-2008:162  View
295722 57786 CVE-2007-5729 23731  View
295723 57786 CVE-2007-5729 ADV-2007-1597  View
295724 57786 CVE-2007-5729 qemu-ne2000-code-execution(38238)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54146 JVNDB-2007-002838 QEMU の NE2000 エミュレータにおける任意のコードを実行される脆弱性 QEMU の NE2000 エミュレータには、任意のコードを実行される脆弱性が存在します。 CVE-2007-5729 29084 CVE-2007-5729 57786 6.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002838.html 2007-10-30 2012-06-26 View