QEMU image size verification Integer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
QEMU
Description:
--------------------------------------------------------------------------------
Bugtraq id: 67391
CVE (CAN) ID: CVE-2014-0223
 
QEMU is an open source simulator software.
 
QEMU has the integer overflow vulnerability in implementation. After successful exploitation, attackers can execute arbitrary code in the application context.

Ubuntu 12.04 cannot find the Qemu command

Install QEMU + efi bios on Arch Linux

QEMU translation framework and debugging tools
 
<* Source: Prasad J Pandit
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
QEMU
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://fabrice.bellard.free.fr/qemu/

This article permanently updates the link address: