CVE-2012-0105 - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows

CVE-2012-0105

Summary

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Guest Additions.

References

Vulnerable Configurations

cpe:2.3:a:oracle:virtualization:4.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:virtualization:4.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:vm_virtualbox:4.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:vm_virtualbox:4.1:*:*:*:*:*:*:*

CVSS

Base:	3.7 (as of 19-09-2017 - 01:34)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:H/Au:N/C:P/I:P/A:P

oval via4

accepted

2014-02-17T04:00:11.043-05:00

class

vulnerability

contributors

name Sergey Artykhov
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT

definition_extensions

comment	VirtualBox is installed
oval	oval:org.mitre.oval:def:11581

description

family

windows

oval:org.mitre.oval:def:16235

status

accepted

submitted

2013-04-26T14:33:26.748+04:00

title

Unspecified vulnerability in the Oracle VM VirtualBox 4.1 component

version

refmap via4

confirm	http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
gentoo	GLSA-201204-01
osvdb	78442
secunia	48755 50897
suse	openSUSE-SU-2012:1323
xf	virtualization-vmvirtualbox-cve20120105(72511)

Last major update

19-09-2017 - 01:34

Published

18-01-2012 - 22:55

Last modified

19-09-2017 - 01:34