CVE Intelligence

Vulnerabilidades do Oracle Virtualbox

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Oracle Virtualbox: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:oracle:virtualbox

CVE-2008-3431 Alta · 8.8 KEV Alta · 63 Exploit público 05/08/2008
Oracle VirtualBox Insufficient Input Validation Vulnerability
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.