Unscored severity · published Oct 30, 2007
CVE-2007-1321
Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
3.1; 4.0 · source: NVD
FE
Fedora · Fedoraproject
7 · source: NVD
FC
Fedora Core · Fedoraproject
6 · source: NVD
QE
Qemu · Qemu
0.8.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1321
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1321
Broken Link
http://osvdb.org/35495
Third Party Advisory
http://secunia.com/advisories/25073
Third Party Advisory
http://secunia.com/advisories/25095
Third Party Advisory
http://secunia.com/advisories/27047
Third Party Advisory
http://secunia.com/advisories/27072
Third Party Advisory
http://secunia.com/advisories/27103
More from Debian Linux
10.0
CVE-2025-32433
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
10.0
CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2026-24061
GNU InetUtils Argument Injection Vulnerability
