CVE

Id
68390  
CVE No.
CVE-2014-0981  
Status
Candidate  
Description
VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption. NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.  
Phase
Assigned (20140107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
658542 68390 CVE-2014-0981 BUGTRAQ:20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities  View
658543 68390 CVE-2014-0981 URL:http://www.securityfocus.com/archive/1/archive/1/531418/100/0/threaded  View
658544 68390 CVE-2014-0981 EXPLOIT-DB:32208  View
658545 68390 CVE-2014-0981 URL:http://www.exploit-db.com/exploits/32208  View
658546 68390 CVE-2014-0981 FULLDISC:20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities  View
658547 68390 CVE-2014-0981 URL:http://seclists.org/fulldisclosure/2014/Mar/95  View
658548 68390 CVE-2014-0981 MISC:http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities  View
658549 68390 CVE-2014-0981 CONFIRM:https://www.virtualbox.org/changeset/50437/vbox  View
658550 68390 CVE-2014-0981 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html  View
658551 68390 CVE-2014-0981 SECUNIA:57384  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15481 JVNDB-2014-004356 Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性 Advantech WebAccess (旧 BroadWin WebAccess) には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-0989 68390 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004356.html  View