CVE-2007-1321: Buffer Overflow
Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1321?
CVE-2007-1321 is considered a high severity vulnerability due to its potential for causing a heap-based buffer overflow.
How do I fix CVE-2007-1321?
To fix CVE-2007-1321, update QEMU to a version later than 0.8.2 that addresses this integer signedness error.
Which software is affected by CVE-2007-1321?
CVE-2007-1321 affects QEMU version 0.8.2 and various versions of Fedora and Debian operating systems.
What type of vulnerability is CVE-2007-1321?
CVE-2007-1321 is classified as an integer signedness error that leads to a buffer overflow.
Can CVE-2007-1321 be exploited remotely?
CVE-2007-1321 requires local access for exploitation through certain register values.