Lucene search

[email protected]CVE-2014-4228

HistoryJul 17, 2014 - 5:10 a.m.

CVE-2014-4228

2014-07-1705:10:16

[email protected]

web.nvd.nist.gov

cve-2014-4228

oracle

virtualbox

vulnerability

confidentiality

integrity

availability

graphics driver

wddm

windows guests

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

5.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.3%

JSON

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via vectors related to Graphics driver (WDDM) for Windows guests.

Affected configurations

NVD

Node

oraclevm_virtualboxRange≤4.1.32

oraclevm_virtualboxMatch4.1.0

oraclevm_virtualboxMatch4.1.2

oraclevm_virtualboxMatch4.1.4

oraclevm_virtualboxMatch4.1.6

oraclevm_virtualboxMatch4.1.8

oraclevm_virtualboxMatch4.1.10

oraclevm_virtualboxMatch4.1.12

oraclevm_virtualboxMatch4.1.14

oraclevm_virtualboxMatch4.1.16

oraclevm_virtualboxMatch4.1.18

oraclevm_virtualboxMatch4.1.20

oraclevm_virtualboxMatch4.1.22

oraclevm_virtualboxMatch4.1.24

oraclevm_virtualboxMatch4.1.26

oraclevm_virtualboxMatch4.1.28

oraclevm_virtualboxMatch4.1.30

Node

oraclevm_virtualboxRange≤4.3.10

oraclevm_virtualboxMatch4.3.0

oraclevm_virtualboxMatch4.3.2

oraclevm_virtualboxMatch4.3.4

oraclevm_virtualboxMatch4.3.6

oraclevm_virtualboxMatch4.3.8

Node

oraclevm_virtualboxRange≤4.2.24

oraclevm_virtualboxMatch4.2.0

oraclevm_virtualboxMatch4.2.2

oraclevm_virtualboxMatch4.2.4

oraclevm_virtualboxMatch4.2.6

oraclevm_virtualboxMatch4.2.8

oraclevm_virtualboxMatch4.2.10

oraclevm_virtualboxMatch4.2.12

oraclevm_virtualboxMatch4.2.14

oraclevm_virtualboxMatch4.2.16

oraclevm_virtualboxMatch4.2.18

oraclevm_virtualboxMatch4.2.20

oraclevm_virtualboxMatch4.2.22

CPENameOperatorVersion
oracle:vm_virtualboxoracle vm virtualboxle4.1.32
oracle:vm_virtualboxoracle vm virtualboxeq4.1.0
oracle:vm_virtualboxoracle vm virtualboxeq4.1.2
oracle:vm_virtualboxoracle vm virtualboxeq4.1.4
oracle:vm_virtualboxoracle vm virtualboxeq4.1.6
oracle:vm_virtualboxoracle vm virtualboxeq4.1.8
oracle:vm_virtualboxoracle vm virtualboxeq4.1.10
oracle:vm_virtualboxoracle vm virtualboxeq4.1.12
oracle:vm_virtualboxoracle vm virtualboxeq4.1.14
oracle:vm_virtualboxoracle vm virtualboxeq4.1.16

CPE	Name	Operator	Version
oracle:vm_virtualbox	oracle vm virtualbox	le	4.1.32
oracle:vm_virtualbox	oracle vm virtualbox	eq	4.1.0
oracle:vm_virtualbox	oracle vm virtualbox	eq	4.1.2
oracle:vm_virtualbox	oracle vm virtualbox	eq	4.1.4
oracle:vm_virtualbox	oracle vm virtualbox	eq	4.1.6
oracle:vm_virtualbox	oracle vm virtualbox	eq	4.1.8
oracle:vm_virtualbox	oracle vm virtualbox	eq	4.1.10
oracle:vm_virtualbox	oracle vm virtualbox	eq	4.1.12
oracle:vm_virtualbox	oracle vm virtualbox	eq	4.1.14
oracle:vm_virtualbox	oracle vm virtualbox	eq	4.1.16