NetSight
IP …
medium5.0Public exploit code

CVE-2008-2382

The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a den…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.

Affected products

VendorProductAffected versions
QemuQemu
through 0.9.1
Versions 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4
Kvm QumranetKvm
through 79
Versions 1, 2, 3, 4, 5

Weakness classification

CWE-399

References