CVE-2007-5729: Buffer Overflow

Published Oct 30, 2007

Updated

The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the mtu overflow vulnerability.

Affected Software

5 affected components

Qemu Qemu=0.8.2

Debian Debian Linux=3.1

Debian Debian Linux=4.0

openSUSE openSUSE=11.1

openSUSE openSUSE=11.0

Event History

Oct 30, 2007

CVE Published

10:46 PM

Oct 31, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5729?

CVE-2007-5729 has a high severity due to its potential to allow local users to execute arbitrary code.

How do I fix CVE-2007-5729?

To fix CVE-2007-5729, you should update QEMU to a version where this vulnerability has been addressed.

Which versions of QEMU are affected by CVE-2007-5729?

CVE-2007-5729 specifically affects QEMU version 0.8.2.

What type of vulnerability is CVE-2007-5729?

CVE-2007-5729 is a heap-based buffer overflow vulnerability that occurs due to improper handling of Ethernet frames.

Is CVE-2007-5729 specific to any operating systems?

CVE-2007-5729 impacts multiple operating systems, including specific versions of Debian and openSUSE.