NVD

Id
29802  
Name
CVE-2014-0981  
Description
VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption. NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-31  
Modified Date
2014-04-24  
Seq
2014-0981  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157393 29802 CVE-2014-0981 20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities  View
157394 29802 CVE-2014-0981 http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities  View
157395 29802 CVE-2014-0981 32208  View
157396 29802 CVE-2014-0981 http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html  View
157397 29802 CVE-2014-0981 20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities  View
157398 29802 CVE-2014-0981 https://www.virtualbox.org/changeset/50437/vbox  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12979 JVNDB-2014-001854 Oracle VirtualBox の VBox/GuestHost/OpenGL/util/net.c における任意のコードを実行される脆弱性 Oracle VirtualBox の VBox/GuestHost/OpenGL/util/net.c には、3D アクセラレーションを使用する場合、Chromium サーバ上で任意のコードを実行される脆弱性が存在します。 CVE-2014-0981 68382 CVE-2014-0981 29802 4.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001854.html 2014-02-13 2014-04-17 View