NetSight
IP …
high7.2

CVE-2014-2894

Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART…

Impact

Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and memory corruption.

Affected products

VendorProductAffected versions
QemuQemu
through 1.7.1
Versions 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4

Weakness classification

CWE-189

References