CVE-2007-5730

CVSS V2 High 7.2 CVSS V3 None
Description
Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.
Overview
  • CVE ID
  • CVE-2007-5730
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2007-10-30T22:46:00
  • Last Modified Date
  • 2020-12-15T23:48:39
Weakness Enumerations
CWE URL
CWE-787 http://cwe.mitre.org/data/definitions/787.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:qemu:qemu:0.8.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:C/I:C/A:C
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 7.2
  • Severity
  • HIGH
  • Exploitability Score
  • 3.9
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://taviso.decsystem.org/virtsec.pdf Technical Description Third Party Advisory
http://www.debian.org/security/2007/dsa-1284 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:203 Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-October/001842.html Third Party Advisory
http://www.securityfocus.com/bid/23731 Third Party Advisory VDB Entry
http://secunia.com/advisories/27486 Third Party Advisory
http://secunia.com/advisories/25073 Third Party Advisory Vendor Advisory
http://secunia.com/advisories/25095 Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0194.html Third Party Advisory
http://secunia.com/advisories/29963 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 Third Party Advisory
http://osvdb.org/42985 Broken Link
http://secunia.com/advisories/29129 Third Party Advisory
http://www.vupen.com/english/advisories/2007/1597 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38239 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10000 Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2007-5730
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5730
History
Created Old Value New Value Data Type Notes
2022-05-10 07:30:11 Added to TrackCVE