VYPR
Unrated severityNVD Advisory· Published May 2, 2007· Updated Jun 16, 2026

CVE-2007-1320

CVE-2007-1320

Description

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • QEMU/Qemu2 versions
    cpe:2.3:a:qemu:qemu:0.8.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qemu:qemu:0.8.2:*:*:*:*:*:*:*
    • (no CPE)range: =0.8.2
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora_core:6:*:*:*:*:*:*:*
  • OpenSUSE/openSUSE2 versions
    cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

23

News mentions

0

No linked articles in our index yet.