CVE-2013-4541

The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image…

published November 4, 2014

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03975 · 90.4th percentile
Published
2014-11-04T21:00Z
EPSS history
Timeline
  • 04 NOV 21:00Z
    The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image…
    cvelistv5