CVE-2014-2477

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486.

CVSS v2.0

3.6 LOWAV:L/AC:L/Au:N/C:N/I:P/A:P

EPSS

7.20% chance of exploitation in the next 30 days, 94th percentile

Published

2014-07-17

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/34333

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/virtual_box_guest_…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/34333

References

• CVE Record
• NVD entry

Related

• CVE-2014-2424
• CVE-2014-2497
• CVE-2014-2399
• CVE-2014-2526
• CVE-2014-2383
• CVE-2014-2527