Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.
https://security-tracker.debian.org/tracker/CVE-2013-4532
https://github.com/qemu/qemu/commit/2e1198672759eda6e122ff38fcf6df06f27e0fe2
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4532
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4532
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739589