CVE-2016-7777

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.

Metrics

CVSS 3.0 6.3/10CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/93344Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036942Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-190.htmlMitigation, Patch, Vendor Advisory
https://security.gentoo.org/glsa/201611-09
https://support.citrix.com/article/CTX217363
http://www.securityfocus.com/bid/93344Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036942Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-190.htmlMitigation, Patch, Vendor Advisory
https://security.gentoo.org/glsa/201611-09
https://support.citrix.com/article/CTX217363

Timeline

Published: Oct 7, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-77809.8SQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL command CVE-2016-77819.8SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attacke CVE-2016-77829.8SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbi CVE-2016-77839.8SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbi CVE-2016-77849.8SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows r CVE-2016-77855.5The avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (assert fault CVE-2016-77868.8Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference CVE-2016-77874.9A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as supe CVE-2016-77889.8SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute CVE-2016-77899.8SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbi CVE-2016-77909.8Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php' file to the websit CVE-2016-77919.8Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an evil 'exploit.tar.gz'