The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 15.1R7-S1 |