CVE-2008-4539 PUBLISHED CVSS 8.600000381469727 HIGH

Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.

EPSS 0.05% · 14.8th percentile

Risk Scores

CVSS v4.0
8.600000381469727
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.05%
14.8th percentile

Affected Products

VendorProductVersions
qemuqemu0
n/an/an/a
canonicalubuntu_linux8.04, 8.10
kvm_qumranetkvm0
debiandebian_linux5.0, 4.0

Timeline

References

…and 4 more

Open in Interactive Console →