CVE-2011-2300 - Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local

CVE-2011-2300

Summary

Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.

References

Vulnerable Configurations

cpe:2.3:a:oracle:vm_virtualbox:4.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:vm_virtualbox:4.0:*:*:*:*:*:*:*

CVSS

Base:	3.7 (as of 19-09-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:H/Au:N/C:P/I:P/A:P

oval via4

accepted

2014-02-17T04:00:10.099-05:00

class

vulnerability

contributors

name Shane Shaffer
organization G2, Inc.
name Shane Shaffer
organization G2, Inc.
name Sergey Artykhov
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT

definition_extensions

comment	VirtualBox is installed
oval	oval:org.mitre.oval:def:11581

description

Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.

family

windows

oval:org.mitre.oval:def:13148

status

accepted

submitted

2011-10-11T15:20:33.178-04:00

title

Unspecified vulnerability in Oracle VM VirtualBox related to Guest Additions for Windows

version

refmap via4

cert	TA11-201A
confirm	http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html
gentoo	GLSA-201204-01
sectrack	1025805
secunia	48755

Last major update

19-09-2017 - 01:32

Published

21-07-2011 - 00:55

Last modified

19-09-2017 - 01:32