CVE-2007-0998

Published: Mar 20, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demonstrated by mapping files to a CDROM device. NOTE: some of these details are obtained from third party information.

Affected (1)

Products: Xen: Qemu

1 product

Configuration A

1 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Xen Qemu	All versions

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 5.0
Redhat Fedora Core	Version core6
Redhat Fedora Core	Version core_5.0

Related CWEs

References (32)

http://fedoranews.org/cms/node/2802

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2803

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: secalert@redhat.com

http://osvdb.org/34304

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2007-0114.html

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/24575

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51413

Source: secalert@redhat.com

http://www.securityfocus.com/bid/22967

Source: secalert@redhat.com

http://www.securitytracker.com/id?1017764

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1019

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1020

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1021

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33085

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10486

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2802

Source: af854a3a-2127-422b-91ae-364da2661108

http://fedoranews.org/cms/node/2803

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/34304

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2007-0114.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/24575

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51413

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22967

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017764

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1019

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1020

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1021

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33085

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10486

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.