CVE-2007-2894

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Bochs 2.3 - Buffer Overflow (Denial of Service) (PoC)2007-05-31 · dos · linux · Verified

Impact

The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.

Affected products

References

• NVD record
• CVE.org record
• http://bugs.gentoo.org/show_bug.cgi?id=188148
• http://osvdb.org/42119
• http://secunia.com/advisories/25470
• http://secunia.com/advisories/27715
• http://security.gentoo.org/glsa/glsa-200711-21.xml
• http://taviso.decsystem.org/virtsec.pdf
• http://www.securityfocus.com/bid/24246
• http://www.vupen.com/english/advisories/2007/1936
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34513
• http://bugs.gentoo.org/show_bug.cgi?id=188148
• http://osvdb.org/42119
• http://secunia.com/advisories/25470
• http://secunia.com/advisories/27715
• http://security.gentoo.org/glsa/glsa-200711-21.xml
• http://taviso.decsystem.org/virtsec.pdf
• http://www.securityfocus.com/bid/24246
• http://www.vupen.com/english/advisories/2007/1936
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34513