6.9

CVE-2014-2487

EPSS 0.08%
Published 17.07.2014 05:10:14
Last modified 12.04.2025 10:46:40
Source secalert_us@oracle.com
Teams watchlist Login
Open Login

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-4261.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Oracle ≫ Vm Virtualbox Version >= 3.2.0 < 3.2.24

Microsoft ≫ Windows

Oracle ≫ Vm Virtualbox Version >= 4.0 < 4.0.26

Microsoft ≫ Windows

Oracle ≫ Vm Virtualbox Version >= 4.1.0 < 4.1.34

Microsoft ≫ Windows

Oracle ≫ Vm Virtualbox Version >= 4.2.0 < 4.2.26

Microsoft ≫ Windows

Oracle ≫ Vm Virtualbox Version >= 4.3.0 < 4.3.14

Microsoft ≫ Windows

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.21

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

http://seclists.org/fulldisclosure/2014/Dec/23

Third Party Advisory

Mailing List

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Vendor Advisory

http://www.securityfocus.com/archive/1/534161/100/0/threaded

Third Party Advisory

VDB Entry

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-2487

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-2487

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-2487

EUVD