CVE-2007-1366: Debian Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error.

Affected products

• Debian Debian Linux: version 3.1 only; version 4.0 only
• Qemu Qemu: version 0.8.2 only

Published 2007-05-02. Last modified 2026-06-16.