PT-2012-4576 · Oracle · Virtualbox+1

Halfdog · Published 2012-10-17 · Updated 2017-09-19 · CVE-2012-3221

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Virtualization versions 3.2, 4.0, and 4.1

Description The issue affects the availability of the system, related to the VirtualBox Core component. It is caused by an unspecified vulnerability that allows local users to impact the system via unknown vectors. There are claims from another vendor that this issue might be related to incorrect interrupt handling.

Recommendations For versions 3.2, 4.0, and 4.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2012-3221

DSA-2594-1

Affected Products

Oracle Virtualization

Virtualbox

References · 9

• 🔥 https://exploit-db.com/exploits/21224 · Exploit
• http://oracle.com/technetwork/topics/security/cpuoct2012-1515893.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3221 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory
• http://debian.org/security/2012/dsa-2594 · Vendor Advisory
• http://securityfocus.com/bid/56045 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16681 · Note
• http://securitytracker.com/id?1027666 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79380 · Note