PT-2016-4344 · Oracle+1 · Virtualbox+1

Stefan Kanthak · Publicado 2016-01-21 · Atualizado 2018-10-09 · CVE-2016-0602

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.14

Description The issue affects confidentiality, integrity, and availability. It is related to unknown vectors and the Windows Installer. There are claims that this could be an untrusted search path issue, potentially allowing local users to gain privileges via a Trojan horse dll in the application directory.

Recommendations For versions prior to 5.0.14, update to version 5.0.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the application directory to minimize the risk of exploitation.

Correção

Identificadores relacionados

ALT-PU-2016-1230

ALT-PU-2016-1231

ALT-PU-2016-1232

ALT-PU-2016-1256

ALT-PU-2016-1263

CVE-2016-0602

Produtos afetados

Alt Linux

Virtualbox

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-0602 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/537462/100/0/threaded · Nota
• https://osv.dev/vulnerability/CVE-2016-0602 · Aviso do Fabricante
• http://securitytracker.com/id/1034731 · Nota
• http://seclists.org/fulldisclosure/2016/Feb/54 · Nota