CVE-2008-3431

Опубликовано: 05 авг. 2008

Источник: nvd

CVSS3: 8.8

CVSS2: 7.2

EPSS Низкий

Описание

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.

Ссылки

http://secunia.com/advisories/31361
Broken Link
Vendor Advisory
http://securityreason.com/securityalert/4107
Broken Link
http://securitytracker.com/id?1020625
Broken Link
Third Party Advisory
VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1
Broken Link
http://virtualbox.org/wiki/Changelog
Product
http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability
Exploit
Third Party Advisory
http://www.securityfocus.com/archive/1/495095/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/30481
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/2293
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/44202
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/6218
Exploit
Third Party Advisory
VDB Entry
http://secunia.com/advisories/31361
Broken Link
Vendor Advisory
http://securityreason.com/securityalert/4107
Broken Link
http://securitytracker.com/id?1020625
Broken Link
Third Party Advisory
VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1
Broken Link
http://virtualbox.org/wiki/Changelog
Product
http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability
Exploit
Third Party Advisory
http://www.securityfocus.com/archive/1/495095/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/30481
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/2293
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:oracle:virtualbox:*:*:*:*:*:*:*:*

Версия до 1.6.4 (исключая)

EPSS

Процентиль: 90%

0.05378

Низкий

8.8 High

CVSS3

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2008-3431

CVSS3: 8.8

ubuntu

больше 17 лет назад

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.

CVE-2008-3431

CVSS3: 8.8

debian

больше 17 лет назад

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualB ...

GHSA-pxp3-358m-6vfm

CVSS3: 8.8

github

почти 4 года назад

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.

EPSS

Процентиль: 90%

0.05378

Низкий

8.8 High

CVSS3

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo