CVE-2012-3515

Name of the Vulnerable Software and Affected Versions Qemu versions as used in Xen 4.0, 4.1

Description The issue allows local OS guest users to gain privileges through a crafted escape VT100 sequence. This sequence triggers the overwrite of a device model's address space when emulating certain devices with a virtual console backend.

Recommendations For Qemu as used in Xen 4.0, 4.1, consider disabling the virtual console backend for certain devices until a patch is available. Restrict access to the device model to minimize the risk of exploitation. Avoid using the virtual console backend for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.