The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2014-11-04T21:00:00

Updated: 2014-11-04T20:57:01

Reserved: 2013-06-12T00:00:00


Link: CVE-2013-4541

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2014-11-04T21:55:24.953

Modified: 2023-02-13T04:47:30.207


Link: CVE-2013-4541

JSON object: View

cve-icon Redhat Information

No data.

CWE