QEMU multiple buffer overflow vulnerabilities (CVE-2014-0144)

Release date:
Updated on:

Affected Systems:
QEMU
Description:
--------------------------------------------------------------------------------
Bugtraq id: 66483
CVE (CAN) ID: CVE-2014-0144
 
QEMU is an open source simulator software.
 
QEMU has multiple buffer overflow vulnerabilities. Attackers can exploit these vulnerabilities to execute arbitrary code in the context of the affected application.
 
<* Source: Stefan Hajnoczi
Jeff Cody
Fam Zheng
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
QEMU
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://fabrice.bellard.free.fr/qemu/

QEMU details: click here
QEMU: click here

Ubuntu 12.04 cannot find the Qemu command

Install QEMU + efi bios on Arch Linux

QEMU translation framework and debugging tools