CVE-2010-4414 - Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality,

CVE-2010-4414

Summary

Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions.

References

Vulnerable Configurations

cpe:2.3:a:oracle:vm_virtualbox:4.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:vm_virtualbox:4.0:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 19-09-2017 - 01:31)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:S/C:C/I:C/A:C

oval via4

accepted

2013-12-23T04:00:10.810-05:00

class

vulnerability

contributors

name SecPod Team
organization SecPod Technologies
name Shane Shaffer
organization G2, Inc.
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT

definition_extensions

comment	VirtualBox is installed
oval	oval:org.mitre.oval:def:11581

description

Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions.

family

windows

oval:org.mitre.oval:def:12576

status

accepted

submitted

2011-03-16T16:16:20

title

Unspecified vulnerability in Oracle VM VirtualBox 4.0

version

refmap via4

bid	45876
confirm	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
gentoo	GLSA-201204-01
secunia	42985 48755
vupen	ADV-2011-0152
xf	oracle-virtualbox-privilege-escalation(64810)

Last major update

19-09-2017 - 01:31

Published

19-01-2011 - 16:00

Last modified

19-09-2017 - 01:31