CVE-2007-1320: debian debian_linux Out-of-bounds Write
Vulnerability summary
CVE-2007-1320 is a high (CVSS 7.2) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 0.49% chance of exploitation in the next 30 days, higher than 42.1% of scored vulnerabilities.
Not severe (CVSS 7.2, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 1Timeline
- 02-05-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.49%
Chance of exploitation in the next 30 days
Percentile
42%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.49% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Debian2 products
- qemu< 0.9.0-2
- debian_linuxEOL3.1 | 4.0
Fedoraproject2 products
- fedoraEOL8 | 9
- fedora_core6
Opensuse1 product
- opensuseEOL11.0 | 11.1
Qemu1 product
- qemu0.8.2
4 vendors · 6 products
References
24 links- www.mandriva.com/security/advisories?name=MDKSA-2007:203Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- www.redhat.com/archives/fedora-package-announce/2008-May/msg00706.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10315VDB EntrySignatureX Refsource OVALThird Party Advisory
- www.redhat.com/archives/fedora-package-announce/2008-May/msg00935.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
Show all 24 references
- www.mandriva.com/security/advisories?name=MDVSA-2008:162Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.redhat.com/support/errata/RHSA-2007-0323.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- www.redhat.com/archives/fedora-package-announce/2007-October/msg00082.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory