CVE-2008-4539: canonical ubuntu_linux

Vulnerability summary

CVE-2008-4539 is a high (CVSS 7.2) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 45.3% of scored vulnerabilities.

Timeline

1. 29-12-2008
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.