CVE-2008-1945 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-1945
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1945

Description: QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44269 UBUNTU http://www.ubuntu.com/usn/usn-776-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html ST 1020959 SAID Secunia Advisory: SA35031 Secunia Advisory: SA34642 Secunia Advisory: SA32063 Secunia Advisory: SA32088 Secunia Advisory: SA35062 REDHAT MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 DEBIAN http://www.debian.org/security/2009/dsa-1799 BID 30604

Return to the previous page.