Unrated severityNVD Advisory· Published May 30, 2007· Updated Jun 16, 2026
CVE-2007-2893
CVE-2007-2893
Description
Heap-based buffer overflow in the bx_ne2k_c::rx_frame function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register values to exceed the device memory size, aka "RX Frame heap overflow."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:bochs_project:bochs:2.3:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:bochs_project:bochs:2.3:-:*:*:*:*:*:*
- (no CPE)range: =2.3
Patches
Vulnerability mechanics
References
11- bugs.gentoo.org/show_bug.cginvdThird Party Advisory
- secunia.com/advisories/25470nvdThird Party Advisory
- secunia.com/advisories/26364nvdThird Party Advisory
- secunia.com/advisories/27715nvdThird Party Advisory
- security.gentoo.org/glsa/glsa-200711-21.xmlnvdThird Party Advisory
- taviso.decsystem.org/virtsec.pdfnvdThird Party Advisory
- www.debian.org/security/2007/dsa-1351nvdThird Party Advisory
- www.securityfocus.com/bid/24246nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2007/1936nvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/34508nvdThird Party AdvisoryVDB Entry
- osvdb.org/36799nvdBroken Link
News mentions
0No linked articles in our index yet.