CVE-2011-4111
26.02.2014, 15:55
Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux_server_supplementary | 6.1.z:z |
| qemu | qemu | 𝑥 ≤ 0.15.1 |
| qemu | qemu | 0.15.0 |
| qemu | qemu | 0.15.0:rc1 |
| qemu | qemu | 0.15.0:rc2 |
| qemu | qemu | 1.0 |
| qemu | qemu | 1.0:rc1 |
| qemu | qemu | 1.0:rc2 |
| qemu | qemu | 1.0:rc3 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qemu |
| ||||||||||||||||
| xen |
|
Ubuntu Releases
Common Weakness Enumeration
References