ByteOS Network

NVD Vulnerability Details :

CVE-2007-1320

Analyzed

Source-cve@mitre.org

Published At-02 May, 2007 | 17:19

Updated At-15 Dec, 2020 | 23:52

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html	cve@mitre.org	Mailing List Third Party Advisory
http://osvdb.org/35494	cve@mitre.org	Broken Link
http://secunia.com/advisories/25073	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/25095	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/27047	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/27085	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/27103	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/27486	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29129	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/30413	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/33568	cve@mitre.org	Third Party Advisory
http://taviso.decsystem.org/virtsec.pdf	cve@mitre.org	Technical Description Third Party Advisory
http://www.debian.org/security/2007/dsa-1284	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2007/dsa-1384	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:203	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:162	cve@mitre.org	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0323.html	cve@mitre.org	Third Party Advisory
http://www.securityfocus.com/bid/23731	cve@mitre.org	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/1597	cve@mitre.org	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10315	cve@mitre.org	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.html	cve@mitre.org	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00706.html	cve@mitre.org	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00935.html	cve@mitre.org	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History