CVE-2013-4537

The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm…

published November 4, 2014

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02927 · 87.0th percentile
Published
2014-11-04T21:00Z
EPSS history
Timeline
  • 04 NOV 21:00Z
    The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm…
    cvelistv5