NetSight
IP …
high7.2

CVE-2010-0297

Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS use…

Impact

Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.

Affected products

VendorProductAffected versions
QemuQemu
through 0.11.0
Versions 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4

Weakness classification

CWE-119

References