CVE-2012-6075

Name of the Vulnerable Software and Affected Versions QEMU versions 1.3.0-rc2 and other versions

Description The issue is related to a buffer overflow in the e1000 receive function in the e1000 device driver. This occurs when the SBP and LPE flags are disabled, allowing remote attackers to cause a denial of service, potentially leading to a guest OS crash, and possibly execute arbitrary guest code via a large packet.

Recommendations For QEMU version 1.3.0-rc2, consider disabling the e1000 device driver until a patch is available. For other affected versions, at the moment, there is no information about a newer version that contains a fix for this vulnerability.