]> xenbits.xensource.com Git - qemu-xen-4.5-testing.git/commit
projects / qemu-xen-4.5-testing.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a810a2d) | patch
slirp: fix CVE 2007-5729
authoraurel32 <aurel32@c046a42c-6fe2-441c-8c8c-71466251a162>
Sun, 7 Dec 2008 18:15:23 +0000 (18:15 +0000)
committeraurel32 <aurel32@c046a42c-6fe2-441c-8c8c-71466251a162>
Sun, 7 Dec 2008 18:15:23 +0000 (18:15 +0000)
commite8e880a72e63d0587f03aa670be3de683b881ca8
tree1581368764d44d56922b384787971b36f1dd1494tree
parenta810a2de170565529464072edf2102443aaa9fabcommit | diff
slirp: fix CVE 2007-5729

The emulated network cards in QEMU allows local users to execute arbitrary
code by writing Ethernet frames with a size larger than the slirp's default
MTU, which triggers a heap-based buffer overflow in the slirp library.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
git-svn-id: svn://svn.savannah.nongnu.org/qemu/trunk@5920 c046a42c-6fe2-441c-8c8c-71466251a162
slirp/slirp.c diff | blob | history
Unnamed repository; edit this file to name it for gitweb.