PT-2014-4731 · Oracle · Virtualbox

Published 2014-07-17 · Updated 2018-12-13 · CVE-2014-2487

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 3.2.24 Oracle VM VirtualBox versions prior to 4.0.26 Oracle VM VirtualBox versions prior to 4.1.34 Oracle VM VirtualBox versions prior to 4.2.26 Oracle VM VirtualBox versions prior to 4.3.14

Description The issue affects the confidentiality, integrity, and availability of the system. It is related to the Core component of Oracle VM VirtualBox when running on Windows. The exact vectors of the issue are unknown.

Recommendations For versions prior to 3.2.24, update to version 3.2.24 or later. For versions prior to 4.0.26, update to version 4.0.26 or later. For versions prior to 4.1.34, update to version 4.1.34 or later. For versions prior to 4.2.26, update to version 4.2.26 or later. For versions prior to 4.3.14, update to version 4.3.14 or later.

Fix

Related Identifiers

CVE-2014-2487

Affected Products

Virtualbox

References · 9

• https://ubuntu.com/security/CVE-2014-2487 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-2487 · Vendor Advisory
• http://oracle.com/technetwork/topics/security/cpujul2014-1972956.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2487 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-2487 · Security Note
• http://seclists.org/fulldisclosure/2014/Dec/23 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2487 · Note
• http://vmware.com/security/advisories/VMSA-2014-0012.html · Note
• http://securityfocus.com/archive/1/534161/100/0/threaded · Note