CVE-2007-0998

The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demonstrated by mapping files to a CDROM device. NOTE: some of these details are obtained from third party information.

• CWE-264

• http://fedoranews.org/cms/node/2802
• http://fedoranews.org/cms/node/2803
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://osvdb.org/34304
• http://rhn.redhat.com/errata/RHSA-2007-0114.htmlPatch
• http://secunia.com/advisories/24575Vendor Advisory
• http://secunia.com/advisories/51413
• http://www.securityfocus.com/bid/22967
• http://www.securitytracker.com/id?1017764
• http://www.vupen.com/english/advisories/2007/1019Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1020Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1021Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33085
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10486
• http://fedoranews.org/cms/node/2802
• http://fedoranews.org/cms/node/2803
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://osvdb.org/34304
• http://rhn.redhat.com/errata/RHSA-2007-0114.htmlPatch
• http://secunia.com/advisories/24575Vendor Advisory
• http://secunia.com/advisories/51413
• http://www.securityfocus.com/bid/22967
• http://www.securitytracker.com/id?1017764
• http://www.vupen.com/english/advisories/2007/1019Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1020Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1021Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33085
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10486

Published

Mar 20, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0992Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-0993Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-0994A regression error in Mozilla Firefox 2.x before 2.0.0.2 and…
• CVE-2007-0995Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and …
• CVE-2007-0996The child frames in Mozilla Firefox before 1.5.0.10 and 2.x …
• CVE-2007-0997Race condition in the tee (sys_tee) system call in the Linux…
• CVE-2007-0999Format string vulnerability in Ekiga 2.0.3, and probably oth…
• CVE-2007-1000The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglu…
• CVE-2007-10001A vulnerability classified as problematic has been found in …7.5
• CVE-2007-10002A vulnerability, which was classified as critical, has been …9.8
• CVE-2007-10003A vulnerability, which was classified as critical, has been …8.8
• CVE-2007-1001Multiple integer overflows in the (1) createwbmp and (2) rea…