CVE-2011-4111

EPSS 2.7%

發布日:2014/2/26修改日:2026/4/28

也稱為:DEBIAN-CVE-2011-4111

描述

Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.

受影響套件(2)

Debian/qemufrom 0, < 0.15.1+dfsg-2
Debian/xenfrom 0, < 4.4.0-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2011-4111