CVE-2013-2007

CVE-2013-2007 describes a local privilege escalation vulnerability in the Qemu guest agent (versions 1.4.1 and earlier), specifically when used by Xen and operating in daemon mode. The agent uses weak file permissions, allowing local users to read and write to sensitive files. With a CVSS score of 6.9, this vulnerability has a local attack vector, medium attack complexity, and high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or Metasploit/Nuclei modules, though it has garnered some community discussion.