CVE-2007-1320

Published: May 2, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Affected (8)

Products: Qemu: Qemu · Fedoraproject: Fedora, Fedora Core · Opensuse: Opensuse · +1 more

Show all products

Qemu: Qemu · Fedoraproject: Fedora, Fedora Core · Opensuse: Opensuse · Debian: Debian Linux

1 product

2 products

1 product

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qemu Qemu	Version 0.8.2

Running on/with	Platform Versions
Xen Xen	All versions

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 8
Fedoraproject Fedora	Version 9
Fedoraproject Fedora Core	Version 6

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.0
Opensuse Opensuse	Version 11.1

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (46)

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://osvdb.org/35494

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/25073

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/25095

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/27047

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/27085

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/27103

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/27486

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29129

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/30413

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/33568

Source: cve@mitre.org

Third Party Advisory

http://taviso.decsystem.org/virtsec.pdf

Source: cve@mitre.org

Technical DescriptionThird Party Advisory

http://www.debian.org/security/2007/dsa-1284

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2007/dsa-1384

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:203

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:162

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0323.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/23731

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2007/1597

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10315

Source: cve@mitre.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.html

Source: cve@mitre.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00706.html

Source: cve@mitre.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00935.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html