CVE-2016-0749
CriticalSummary
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
Risk Assessment
Attackers may exploit this vulnerability to disrupt system operations or gain control over it, posing a serious security threat to the organization.
Recommendation
It is recommended to update SPICE software to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.