Every CVE Search/ Get API key

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other...

7.2 HighFix available

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.

Exploit likelihood

0.46%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.

Record
CVE-2007-1321
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.

Record
CVE-2007-1321
Updated
2026-11-02
EUVDEUVD-2007-1318 No score

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.

Record
EUVD-2007-1318
Updated
2026-11-03
GitHub AdvisoriesGHSA-793p-rv2q-qv42 No score

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other...

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.

Record
GHSA-793p-rv2q-qv42
Updated
2026-11-02
OSV No score

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.

Record
CVE-2007-1321
Updated
2026-11-02
OSVDEBIAN-CVE-2007-1321 No score

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.

Record
DEBIAN-CVE-2007-1321
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu
Debian:12
 before 0.9.0-2
0.9.0-2
qemu
Debian:13
 before 0.9.0-2
0.9.0-2
qemu
Debian:14
 before 0.9.0-2
0.9.0-2
qemu
Debian:3.1
From an advisory covering 6 CVEs
 before 0.6.1+20050407-1sarge1, plus listed versions
0.6.1+20050407-1
0.6.1+20050407-1sarge1
qemu
Debian:4.0
From an advisory covering 6 CVEs
 before 0.8.2-4etch1, plus listed versions
0.8.2-4
0.8.2-4etch1
kvm
Debian:5.0
From an advisory covering 6 CVEs
 before 60+dfsg-1+lenny1
60+dfsg-1+lenny1
qemu
Debian:5.0
From an advisory covering 4 CVEs
 before 0.8.2-5lenny1
0.8.2-5lenny1
xen
Red Hat:rhel_virtualization:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-debuginfo
Red Hat:rhel_virtualization:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-devel
Red Hat:rhel_virtualization:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
Show 9 moreShow less
Affected packages
PackageAffectedFixed
xen
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen
Red Hat:rhel_virtualization:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-debuginfo
Red Hat:rhel_virtualization:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-devel
Red Hat:rhel_virtualization:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5
xen-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 3 CVEs
 before 0:3.0.3-25.0.4.el5
0:3.0.3-25.0.4.el5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
aliases
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-1321 is a high vulnerability (CVSS 7.2) in Qemu, published May 1, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in qemu 0.9.0-2.

References

Show 32 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open