National Cyber Awareness System

Vulnerability Summary for CVE-2007-1320

Overview

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2008-4604

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00935.html

External Source: FEDORA

Name: FEDORA-2008-4386

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00706.html

External Source: FEDORA

Name: FEDORA-2007-713

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.html

External Source: VUPEN

Name: ADV-2007-1597

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/1597

External Source: BID

Name: 23731

Hyperlink:http://www.securityfocus.com/bid/23731

External Source: REDHAT

Name: RHSA-2007:0323

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0323.html

External Source: MANDRIVA

Name: MDVSA-2008:162

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:162

External Source: MANDRIVA

Name: MDKSA-2007:203

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:203

External Source: DEBIAN

Name: DSA-1384

Hyperlink:http://www.debian.org/security/2007/dsa-1384

External Source: DEBIAN

Name: DSA-1284

Hyperlink:http://www.debian.org/security/2007/dsa-1284

External Source: MISC

Name: http://taviso.decsystem.org/virtsec.pdf

Hyperlink:http://taviso.decsystem.org/virtsec.pdf

External Source: SECUNIA

Name: 33568

Type: Advisory

Hyperlink:http://secunia.com/advisories/33568

External Source: SECUNIA

Name: 30413

Type: Advisory

Hyperlink:http://secunia.com/advisories/30413

External Source: SECUNIA

Name: 29129

Type: Advisory

Hyperlink:http://secunia.com/advisories/29129

External Source: SECUNIA

Name: 27486

Type: Advisory

Hyperlink:http://secunia.com/advisories/27486

External Source: SECUNIA

Name: 27103

Type: Advisory

Hyperlink:http://secunia.com/advisories/27103

External Source: SECUNIA

Name: 27085

Type: Advisory

Hyperlink:http://secunia.com/advisories/27085

External Source: SECUNIA

Name: 27047

Type: Advisory

Hyperlink:http://secunia.com/advisories/27047

External Source: SECUNIA

Name: 25095

Type: Advisory

Hyperlink:http://secunia.com/advisories/25095

External Source: SECUNIA

Name: 25073

Type: Advisory

Hyperlink:http://secunia.com/advisories/25073

External Source: OVAL

Name: oval:org.mitre.oval:def:10315

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10315

External Source: OSVDB

Name: 35494

Hyperlink:http://osvdb.org/35494

External Source: SUSE

Name: SUSE-SR:2009:002

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10315

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10315