CVE-2008-2004 PUBLISHED CVSS 4.900000095367432 MEDIUM

The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.

EPSS 0.09% · 26.0th percentile

Risk Scores

CVSS v2.0
4.900000095367432
EPSS Score
0.09%
26.0th percentile

Affected Products

VendorProductVersions
qemuqemu0.9.1
n/an/an/a

Timeline

References

Open in Interactive Console →