CVE ID:	CVE-2016-0749
Description:	The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
Test IDs:	1.3.6.1.4.1.25623.1.0.882501   1.3.6.1.4.1.25623.1.0.871628   1.3.6.1.4.1.25623.1.0.882502   1.3.6.1.4.1.25623.1.0.871627   1.3.6.1.4.1.25623.1.0.703596
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0749 Debian Security Information: DSA-3596 (Google Search) http://www.debian.org/security/2016/dsa-3596 https://security.gentoo.org/glsa/201606-05 RedHat Security Advisories: RHSA-2016:1204 https://access.redhat.com/errata/RHSA-2016:1204 RedHat Security Advisories: RHSA-2016:1205 https://access.redhat.com/errata/RHSA-2016:1205 SuSE Security Announcement: openSUSE-SU-2016:1725 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html SuSE Security Announcement: openSUSE-SU-2016:1726 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html http://www.ubuntu.com/usn/USN-3014-1