CVE-2007-2893

CVE-2007-2893 describes a heap-based buffer overflow in the Bochs 2.3 emulator's NE2000 device, specifically within the bx_ne2k_c::rx_frame function. This vulnerability allows a local user on a guest operating system to achieve arbitrary memory writes and privilege escalation on the host system by manipulating TXCNT register values. With a CVSS score of 7.2, it is considered highly severe due to its local attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.