CVE:CVE-2008-1945
CNNVD:CNNVD-200808-092
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）个人开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。
QEMU 0.9.0版本存在绕过安全机制进行非授权访问导致信息泄漏漏洞。
该漏洞使客户操作系统用户可以使用diskformat:参数读取宿主操作系统上的任意文件。通过－usbdevice选项的参数修改磁盘映像头字段数据，从而识别不同的格式来读取文件。
solution:Upgrade qemu qemu to a higher version than 0.9.0,and avoid the version 0.9.0; Upgrade opensuse opensuse to a higher version than 10.3,11.0,11.1,and avoid the version 10.3,11.0,11.1; Upgrade suse linux_enterprise_server to a higher version than 10,11,and avoid the version 10,11; Upgrade debian debian_linux to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade canonical ubuntu_linux to a higher version than 8.04,8.10,and avoid the version 8.04,8.10; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_eus to a higher version than 5.2,and avoid the version 5.2; Upgrade redhat enterprise_linux_server to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,and avoid the version 5.0