Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-3214. PoCs published by Google Security Research.
AI-analyzed exploit summary The exploit targets a heap overflow and information disclosure vulnerability in QEMU's programmable interrupt timer (PIT) controller. By manipulating the channel index, it reads and writes out-of-bounds memory, potentially leaking host data or corrupting heap structures.
Description
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
Exploits (1)
The exploit targets a heap overflow and information disclosure vulnerability in QEMU's programmable interrupt timer (PIT) controller. By manipulating the channel index, it reads and writes out-of-bounds memory, potentially leaking host data or corrupting heap structures.