Security vulnerabilities have been discovered and corrected in
VNC server of qemu version 0.9.1 and earlier, which could lead to
denial-of-service attacks (CVE-2008-2382), and make it easier for
remote crackers to guess the VNC password (CVE-2008-5714).
The updated packages have been patched to prevent this.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-2382
http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-5714
_______________________________________________________________________