high7.2
CVE-2014-3689
The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified paramete…
Impact
The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qemu | Qemu | through 2.1.3 |
| Debian | Debian Linux | Version 7.0 |
| Canonical | Ubuntu Linux | Versions 10.04, 12.04, 14.04, 14.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/60923
- http://secunia.com/advisories/62143
- http://secunia.com/advisories/62144
- http://www.debian.org/security/2014/dsa-3066
- http://www.debian.org/security/2014/dsa-3067
- http://www.osvdb.org/114397
- http://www.ubuntu.com/usn/USN-2409-1
- https://www.mail-archive.com/qemu-devel%40nongnu.org/msg261580.html
- http://secunia.com/advisories/60923
- http://secunia.com/advisories/62143
- http://secunia.com/advisories/62144
- http://www.debian.org/security/2014/dsa-3066
- http://www.debian.org/security/2014/dsa-3067
- http://www.osvdb.org/114397
- http://www.ubuntu.com/usn/USN-2409-1
- https://www.mail-archive.com/qemu-devel%40nongnu.org/msg261580.html