CVE ID:	CVE-2016-3712
Description:	Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
Test IDs:	1.3.6.1.4.1.25623.1.0.871789   1.3.6.1.4.1.25623.1.1.1.2.2016.539   1.3.6.1.4.1.25623.1.1.1.2.2016.540   1.3.6.1.4.1.25623.1.1.1.2.2016.571   1.3.6.1.4.1.25623.1.0.703573
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3712 1035794 http://www.securitytracker.com/id/1035794 90314 http://www.securityfocus.com/bid/90314 DSA-3573 http://www.debian.org/security/2016/dsa-3573 RHSA-2016:2585 http://rhn.redhat.com/errata/RHSA-2016-2585.html RHSA-2017:0621 http://rhn.redhat.com/errata/RHSA-2017-0621.html USN-2974-1 http://www.ubuntu.com/usn/USN-2974-1 [Qemu-devel] 20160509 [PULL 5/5] vga: make sure vga register setup for vbe stays intact (CVE-2016-3712). https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg01196.html [oss-security] 20160509 CVE-2016-3712 Qemu: vga: out-of-bounds read and integer overflow issues http://www.openwall.com/lists/oss-security/2016/05/09/4 http://support.citrix.com/article/CTX212736 http://support.citrix.com/article/CTX212736 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://xenbits.xen.org/xsa/advisory-179.html http://xenbits.xen.org/xsa/advisory-179.html