Security Advisory
CVE-2015-5261
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.