CVE:CVE-2009-3616
CNNVD:CNNVD-200910-369
QEMU是一套由Fabrice Bellard所编写的开源跨平台模拟器。 
QEMU VNC服务器中的vnc.c存在多个安全漏洞，这些漏洞与double free漏洞有关。Guest用户可以先从VNC客户端建立一个连接，然后在数据传输过程中断开连接，使用错误的整型数据类型或模糊屏幕模式协议发送信息，导致执行任意代码。
solution:Upgrade qemu qemu to a higher version than 0.10.6,0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.2.0,0.3.0,0.4.0,0.4.1,0.4.2,0.4.3,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.6.0,0.6.1,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2,0.9.0,0.9.1,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5,and avoid the version (,0.10.6],0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.2.0,0.3.0,0.4.0,0.4.1,0.4.2,0.4.3,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.6.0,0.6.1,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2,0.9.0,0.9.1,0.10.0,0.10.1,0.10.2,0.10.3,0.10.4,0.10.5