CVE-2014-2477
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486.
- Affected products
- Alt Linux, Virtualbox
- Oracle Vm Virtualbox
- ≤ 4.0.24, 4.0, 4.0.0, 4.0.2, 4.0.4, 4.0.6, 4.0.8, 4.0.10, 4.0.12, 4.0.14, 4.0.16, 4.0.18, 4.0.20, 4.0.22
- Fix
- Available
- CVSS 2.0
- 3.6 LOW
- EPSS
- 7.2% (94th percentile)
- NVD status
- Modified
- Published
- 2014-07-17
CVE-2014-2477 at NVD
7 known exploits for CVE-2014-2477
Proof-of-concept code and exploit modules indexed by Sploitus
VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation
VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation Exploit
Oracle VM VirtualBox Guest Additions 4.3.10r93012 - 'VBoxGuest.sys' Local Privilege Escalation (Metasploit)
VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation
Immunity Canvas: VBOX_GUEST
Oracle VirtualBox Guest Additions Arbitrary Write Privilege Escalation
VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation