vendor:
Sun xVM VirtualBox
by:
Esteban Martinez Fayo
7.2
CVSS
HIGH
Insufficient input validation
20
CWE
Product Name: Sun xVM VirtualBox
Affected Version From: Sun xVM VirtualBox version 1.6.2 and prior.
Affected Version To: Sun xVM VirtualBox version 1.6.4 and later.
Patch Exists: Yes
Related CWE: CVE-2008-3431
CPE: a:sun_microsystems:sun_xvm_virtualbox
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2008
Sun xVM VirtualBox Privilege Escalation Vulnerability
An input validation vulnerability was discovered within VirtualBox's 'VBoxDrv.sys' driver that could allow an attacker, with local but un-privileged access to a host where VirtualBox is installed, to execute arbitrary codewithin the context of the kernel.
Mitigation:
Sun Microsystems has released a patch to address this vulnerability.
