CVE ID:	CVE-2007-5730
Description:	Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.
Test IDs:	1.3.6.1.4.1.25623.1.0.122592
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5730 BugTraq ID: 23731 http://www.securityfocus.com/bid/23731 Debian Security Information: DSA-1284 (Google Search) http://www.debian.org/security/2007/dsa-1284 http://www.mandriva.com/security/advisories?name=MDKSA-2007:203 http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 http://taviso.decsystem.org/virtsec.pdf http://osvdb.org/42985 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10000 RedHat Security Advisories: RHSA-2008:0194 http://www.redhat.com/support/errata/RHSA-2008-0194.html http://secunia.com/advisories/25073 http://secunia.com/advisories/25095 http://secunia.com/advisories/27486 http://secunia.com/advisories/29129 http://secunia.com/advisories/29963 http://www.attrition.org/pipermail/vim/2007-October/001842.html http://www.vupen.com/english/advisories/2007/1597 XForce ISS Database: qemu-net-socket-bo(38239) https://exchange.xforce.ibmcloud.com/vulnerabilities/38239