CVE-2012-3515

CVE-2012-3515 describes a privilege escalation vulnerability in Qemu, specifically affecting Xen 4.0, 4.1, and potentially other products, when emulating devices with a virtual console backend. A local guest OS user can exploit this by sending a specially crafted VT100 escape sequence, leading to an overwrite within the device model's address space. This vulnerability carries a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it has not garnered widespread attention.