CVEvulnerability
CVE-2014-3689
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-269
Description
The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling.
Affected configurations
• qemu qemu (<= 2.1.3)
• debian debian linux 7.0
• canonical ubuntu linux 10.04
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 14.10
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://secunia.com/advisories/60923 Third Party Advisory
- http://secunia.com/advisories/62143 Third Party Advisory
- http://secunia.com/advisories/62144 Third Party Advisory
- http://www.debian.org/security/2014/dsa-3066 Third Party Advisory
- http://www.debian.org/security/2014/dsa-3067 Third Party Advisory
- http://www.osvdb.org/114397 Broken Link
- http://www.ubuntu.com/usn/USN-2409-1 Third Party Advisory
- https://www.mail-archive.com/qemu-devel%40nongnu.org/msg261580.html www.mail-archive.com
- http://secunia.com/advisories/60923 Third Party Advisory
- http://secunia.com/advisories/62143 Third Party Advisory
- http://secunia.com/advisories/62144 Third Party Advisory
- http://www.debian.org/security/2014/dsa-3066 Third Party Advisory
- http://www.debian.org/security/2014/dsa-3067 Third Party Advisory
- http://www.osvdb.org/114397 Broken Link
- http://www.ubuntu.com/usn/USN-2409-1 Third Party Advisory
- https://www.mail-archive.com/qemu-devel%40nongnu.org/msg261580.html www.mail-archive.com