{"id":"CVE-2008-4539","published":"2008-12-29T15:00:00Z","modified":"2024-08-07T10:17:09Z","title":"Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux…","vendor":null,"product":null,"tier":"tail","description":{"text":"Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX \"bitblt\" heap overflow.  NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00537,"percentile":0.45134,"provenance":"source"},"cwes":[],"references":[{"url":"http://secunia.com/advisories/35062","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.mail-archive.com/secure-testing-commits%40lists.alioth.debian.org/msg09322.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.mail-archive.com/cvs-all%40freebsd.org/msg129730.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://secunia.com/advisories/25073","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/34642","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=466890","tags":["x_refsource_CONFIRM"]},{"url":"http://www.ubuntu.com/usn/usn-776-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://secunia.com/advisories/33350","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=448525","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47736","tags":["vdb-entry","x_refsource_XF"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=237342","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://secunia.com/advisories/29129","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5587","tags":["x_refsource_CONFIRM"]},{"url":"http://www.debian.org/security/2009/dsa-1799","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://groups.google.com/group/linux.debian.changes.devel/msg/9e0dc008572f2867?dmode=source","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://git.kernel.dk/?p=qemu.git%3Ba=commitdiff%3Bh=65d35a09979e63541afc5bfc595b9f1b1b4ae069","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/35031","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://launchpad.net/ubuntu/jaunty/+source/qemu/0.9.1+svn20081112-1ubuntu1","tags":["x_refsource_CONFIRM"]}],"priority":{"score":9.0,"factors":[{"name":"EPSS percentile","points":9.03}]},"euvd":{"id":"EUVD-2008-4520","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2007-1320-family-cve-2007-1320","parents":[{"from":"CVE-2007-1320","to":"CVE-2008-4539","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.","from":"CVE.org","in":"CVE-2008-4539"}]}]}}