CVE ID:	CVE-2015-5261
Description:	Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
Test IDs:	1.3.6.1.4.1.25623.1.0.122711   1.3.6.1.4.1.25623.1.0.122712
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5261 1033753 http://www.securitytracker.com/id/1033753 DSA-3371 http://www.debian.org/security/2015/dsa-3371 GLSA-201606-05 https://security.gentoo.org/glsa/201606-05 RHSA-2015:1889 http://rhn.redhat.com/errata/RHSA-2015-1889.html RHSA-2015:1890 http://rhn.redhat.com/errata/RHSA-2015-1890.html USN-2766-1 http://www.ubuntu.com/usn/USN-2766-1 [Spice-devel] 20151006 Announcing spice 0.12.6 http://lists.freedesktop.org/archives/spice-devel/2015-October/022191.html [oss-security] 20151006 Fwd: [vs-plain] CVE-2015-5261 http://www.openwall.com/lists/oss-security/2015/10/06/4 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html https://bugzilla.redhat.com/show_bug.cgi?id=1261889 https://bugzilla.redhat.com/show_bug.cgi?id=1261889