VirtualBox 7.2.97 WDDM VidPnSourceId Kernel Memory Corruption

VirtualBox version 7.2.97 Windows Guest Additions WDDM driver contains an unvalidated VidPnSourceId field that can cause out-of-bounds memory access and guest elevation of privilege. The proof of concept triggers the vulnerable driver escape path. https://packetstorm.news/download/235876...

EUVD-2012-1528

Malware in sbrugna...

spice-qxl-wddm-dod bug fix and enhancement update

An update is available for spice-qxl-wddm-dod. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

From DirectX to the Windows Kernel--a few of the CVE vulnerability analysis-vulnerability warning-the black bar safety net

One, Foreword Operating systemthe kernel is each vulnerability the use of chain final goal, we can view the Zero Day Initiative ZDI Pwn2Own calendar year, race, and understand this aspect of the content. Windows kernel has always been the attacker keen to target, my favorite is the abuse of the...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0005) (BEAST) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the following components : - Apache Tomcat - bzip2 library - JRE - WDDM display driver - XPDM display driver...

Oracle VirtualBox WDDM Unspecified Vulnerability (Nov 2014) - Windows

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox WDDM Unspecified Vulnerability (Nov 2014) - Mac OS X

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox WDDM Unspecified Vulnerability (Nov 2014) - Linux

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2014-6540

Oracle VM VirtualBox versions older than 4.1.34, 4.2.x older than 4.2.26, or 4.3.x older than 4.3.14 are affected by an unspecified issue in the WDDM graphics driver for Windows guests that can negatively affect availability via local access. The CVE-2014-6540 entry has a low base score (AV:L/AC:...

CVE-2014-6540: Undefined Security Weakness

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver WDDM for Windows guests...

PT-2014-7276

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 4.1.34 Oracle VM VirtualBox versions prior to 4.2.26 Oracle VM VirtualBox versions prior to 4.3.14 Description The issue affects the availability of the system, related to the Graphics driver WDDM for...

CVE-2014-4228

CVE-2014-4228 affects Oracle VM VirtualBox prior to 4.1.34, 4.2.26, and 4.3.12. The vulnerability stems from the Graphics driver (WDDM) for Windows guests, allowing local users to impact confidentiality, integrity, and availability (partial impacts) via local vectors without authentication. The O...

CVE-2014-4228: Undefined Security Weakness

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via vectors related to Graphics driver WDDM for Windows guests...

PT-2014-5747

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 4.1.34 Oracle VM VirtualBox versions prior to 4.2.26 Oracle VM VirtualBox versions prior to 4.3.12 Description The issue affects confidentiality, integrity, and availability. It is related to vectors...

Oracle VirtualBox Graphics Driver (WDDM) Unspecified Vulnerability (cpuapr2014) - Windows

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Graphics Driver (WDDM) Unspecified Vulnerability (cpuapr2014) - Mac OS X

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2014-2441

CVE-2014-2441 affects Oracle VM VirtualBox (Graphics Driver WDDM) on Windows guests. Affected versions are VirtualBox before 4.1.32, 4.2.24, and 4.3.10. Local privilege escalation could impact confidentiality, integrity, and availability. Remediation per the entry is to upgrade to the fixed relea...

CVE-2014-2441: Undefined Security Weakness

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.32, 4.2.24, and 4.3.10 allows local users to affect confidentiality, integrity, and availability via vectors related to Graphics driver WDDM for Windows guests...

PT-2014-4695

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 4.1.32 Oracle VM VirtualBox versions prior to 4.2.24 Oracle VM VirtualBox versions prior to 4.3.10 Description The issue affects confidentiality, integrity, and availability. It is related to vectors...

CVE-2012-1510

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...