QEMU KVM 'libspice' Component CVE-2010-0429 Local Privilege Escalation Vulnerability

Bugtraq ID:	42583
Class:	Boundary Condition Error
CVE:	CVE-2010-0429
Remote:	No
Local:	Yes
Published:	Aug 20 2010 12:00AM
Updated:	Sep 01 2010 06:33PM
Credit:	Izik Eidus
Vulnerable:	Redhat Enterprise Virtualization Hypervisor 5 Redhat Enterprise Linux Desktop Multi OS 5 client Redhat Enterprise Linux Desktop 5 client QEMU QEMU 0
Not Vulnerable:

QEMU KVM 'libspice' Component CVE-2010-0429 Local Privilege Escalation Vulnerability

QEMU KVM is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to execute arbitrary code with superuser privileges on the host operating system or crash the guest operating system.

QEMU KVM 'libspice' Component CVE-2010-0429 Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

QEMU KVM 'libspice' Component CVE-2010-0429 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

QEMU KVM 'libspice' Component CVE-2010-0429 Local Privilege Escalation Vulnerability

References:

• (CVE-2010-0429) CVE-2010-0429 libspice: Relying on guest provided data structure (Red Hat)
  
• Vendor Homepage (QEMU)