This might be proprietary software.
|2007-05-02||CVE-2007-1320||Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.||Debian_linux, Fedora, Fedora_core, Opensuse, Qemu||N/A|
|2007-10-30||CVE-2007-1321||Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual...||Debian_linux, Fedora, Fedora_core, Qemu||N/A|
|2007-07-15||CVE-2007-3103||The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.||Fedora_core, Enterprise_linux, Enterprise_linux_desktop, Linux||N/A|