Every CVE Search/ Get API key

CVE-2007-1320

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA...

7.2 HighFix available

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Exploit likelihood

0.49%Down 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Record
CVE-2007-1320
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Record
CVE-2007-1320
Updated
2026-11-02
EUVDEUVD-2007-1317 No score

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Record
EUVD-2007-1317
Updated
2026-11-03
GitHub AdvisoriesGHSA-g9wg-j7vq-xx6p No score

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA...

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Record
GHSA-g9wg-j7vq-xx6p
Weakness
CWE-787
Updated
2026-11-02
OSV No score

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Record
CVE-2007-1320
Updated
2026-11-02
OSVDEBIAN-CVE-2007-1320 No score

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.

Record
DEBIAN-CVE-2007-1320
Updated
2026-11-02
OSVopenSUSE-SU-2024:11520-1 No score

xen-4.15.1_01-1.2 on GA media

These are all security issues fixed in the xen-4.15.1_01-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11520-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu
Debian:12
 before 0.9.0-2
0.9.0-2
qemu
Debian:13
 before 0.9.0-2
0.9.0-2
qemu
Debian:14
 before 0.9.0-2
0.9.0-2
qemu
Debian:3.1
From an advisory covering 6 CVEs
 before 0.6.1+20050407-1sarge1, plus listed versions
0.6.1+20050407-1
0.6.1+20050407-1sarge1
qemu
Debian:4.0
From an advisory covering 6 CVEs
 before 0.8.2-4etch1, plus listed versions
0.8.2-4
0.8.2-4etch1
xen-3.0
Debian:4.0
From an advisory covering 2 CVEs
 before 3.0.3-0-3, plus listed versions
3.0.3-0-2
3.0.3-0-3
kvm
Debian:5.0
From an advisory covering 6 CVEs
 before 60+dfsg-1+lenny1
60+dfsg-1+lenny1
qemu
Debian:5.0
From an advisory covering 4 CVEs
 before 0.8.2-5lenny1
0.8.2-5lenny1
xen
Red Hat:rhel_virtualization:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-debuginfo
Red Hat:rhel_virtualization:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
Show 11 moreShow less
Affected packages
PackageAffectedFixed
xen-devel
Red Hat:rhel_virtualization:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen
Red Hat:rhel_virtualization:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-debuginfo
Red Hat:rhel_virtualization:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-devel
Red Hat:rhel_virtualization:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen
openSUSE:Tumbleweed
From an advisory covering 93 CVEs
 before 4.15.1_01-1.2
4.15.1_01-1.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
aliases
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-1320 is a high vulnerability (CVSS 7.2) in Qemu, published May 1, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in qemu 0.9.0-2.

References

Show 127 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open