Bochs x86 PC emulator

Hi,

Short intro I'm a linux enthousiast/developer. Lately I'm mainly active as
a package maintainer for the Fedora distribution, as such I recently
received this bug report:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241799

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2894

"The emulated floppy disk controller in Bochs 2.3 allows local users of
the
guest operating system to cause a denial of service (virtual machine crash)
via
unspecified vectors, resulting in a divide-by-zero error."

Notice that http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2894 points to:
http://www.frsirt.com/english/advisories/2007/1936

Which says:
Two vulnerabilities have been identified in Bochs, which could be exploited
by malicious users to execute arbitrary code or cause a denial of service.

The first issue is caused by a heap overflow error in the emulated NE2000
device that allows a large value in the TXCNT register to exceed the
available memory, which could be exploited by an attacker with "root"
privileges on a vulnerable guest system to execute arbitrary code on the
host system.

The second vulnerability is caused by a divide-by-zero in the emulated
floppy disk controller, which could be exploited by malicious users to
terminate the bochs process, creating a denial of service condition.

So there is not one but 2 issues!