Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2007-2893
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-30 May, 2007 | 01:30
Updated At-23 Apr, 2026 | 00:35

Heap-based buffer overflow in the bx_ne2k_c::rx_frame function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register values to exceed the device memory size, aka "RX Frame heap overflow."

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.07.2HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
Type: Primary
Version: 2.0
Base score: 7.2
Base severity: HIGH
Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CPE Matches
bochs_project
bochs_project
>>bochs>>2.3
cpe:2.3:a:bochs_project:bochs:2.3:-:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-119Primarynvd@nist.gov
CWE ID: CWE-119
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
Organization : Red Hat
Last Modified : 2007-11-02T00:00:00

Not vulnerable. This issue did not affect Xen as shipped with Red Hat Enterprise Linux 5.

References
HyperlinkSourceResource
http://bugs.gentoo.org/show_bug.cgi?id=188148cve@mitre.org
Third Party Advisory
http://osvdb.org/36799cve@mitre.org
Broken Link
http://secunia.com/advisories/25470cve@mitre.org
Third Party Advisory
http://secunia.com/advisories/26364cve@mitre.org
Third Party Advisory
http://secunia.com/advisories/27715cve@mitre.org
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200711-21.xmlcve@mitre.org
Third Party Advisory
http://taviso.decsystem.org/virtsec.pdfcve@mitre.org
Third Party Advisory
http://www.debian.org/security/2007/dsa-1351cve@mitre.org
Third Party Advisory
http://www.securityfocus.com/bid/24246cve@mitre.org
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1936cve@mitre.org
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34508cve@mitre.org
Third Party Advisory
VDB Entry
http://bugs.gentoo.org/show_bug.cgi?id=188148af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://osvdb.org/36799af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://secunia.com/advisories/25470af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/26364af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/27715af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200711-21.xmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://taviso.decsystem.org/virtsec.pdfaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.debian.org/security/2007/dsa-1351af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.securityfocus.com/bid/24246af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1936af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34508af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
VDB Entry
Hyperlink: http://bugs.gentoo.org/show_bug.cgi?id=188148
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://osvdb.org/36799
Source: cve@mitre.org
Resource:
Broken Link
Hyperlink: http://secunia.com/advisories/25470
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://secunia.com/advisories/26364
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://secunia.com/advisories/27715
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://security.gentoo.org/glsa/glsa-200711-21.xml
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://taviso.decsystem.org/virtsec.pdf
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://www.debian.org/security/2007/dsa-1351
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://www.securityfocus.com/bid/24246
Source: cve@mitre.org
Resource:
Third Party Advisory
VDB Entry
Hyperlink: http://www.vupen.com/english/advisories/2007/1936
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/34508
Source: cve@mitre.org
Resource:
Third Party Advisory
VDB Entry
Hyperlink: http://bugs.gentoo.org/show_bug.cgi?id=188148
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://osvdb.org/36799
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Hyperlink: http://secunia.com/advisories/25470
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://secunia.com/advisories/26364
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://secunia.com/advisories/27715
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://security.gentoo.org/glsa/glsa-200711-21.xml
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://taviso.decsystem.org/virtsec.pdf
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://www.debian.org/security/2007/dsa-1351
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://www.securityfocus.com/bid/24246
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
VDB Entry
Hyperlink: http://www.vupen.com/english/advisories/2007/1936
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/34508
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
VDB Entry
Change History
0Changes found
Details not found