CVE:CVE-2012-3515
CNNVD:CNNVD-201209-287
Xen是英国剑桥（Cambridge）大学的一款开源的虚拟机监视器产品。该产品能够使不同和不兼容的操作系统运行在同一台计算机上，并支持在运行时进行迁移，保证正常运行并且避免宕机。
Xen 4.0, 4.1版本以及其他产品中的Qemu中存在输入验证错误漏洞。当使用虚拟主机后端模拟某个设备时，通过特制的转义VT100序列来触发重写“设备模型的地址空间”，具有操作系统访客权限的本地攻击者利用该漏洞获得特权。
solution:Upgrade qemu qemu to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade xen xen to a higher version than 4.0.0,4.1.0,and avoid the version 4.0.0,4.1.0; Upgrade opensuse opensuse to a higher version than 11.4,12.1,12.2,and avoid the version 11.4,12.1,12.2; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp4,11:sp2,and avoid the version 10:sp4,11:sp2; Upgrade suse linux_enterprise_server to a higher version than 10:sp2,10:sp3,10:sp4,11:sp1,11:sp2,and avoid the version 10:sp2,10:sp3,10:sp4,11:sp1,11:sp2; Upgrade suse linux_enterprise_software_development_kit to a higher version than 10:sp4,11:sp2,and avoid the version 10:sp4,11:sp2; Upgrade redhat virtualization to a higher version than 3.0,5.0,6.0,and avoid the version 3.0,5.0,6.0; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.3,and avoid the version 6.3; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade debian debian_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,11.04,11.10,12.04,and avoid the version 10.04,11.04,11.10,12.04