CVE-2014-0404

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0406.

Risk Information

Base Score

6.1

MODERATE

Vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS Score

Exploitation Probability

0.059

Associated Vulnerability

Vulnerability	OS Platform
Update VM VirtualBox 4.3.2 to latest version	Windows
Vulnerabilities CVE-2014-0404,CVE-2014-0406 are affected in Oracle VM VirtualBox 2.4	Windows
virtualbox security update(DSA-3384-1) virtualbox_4.1.42-dfsg-1+deb7u1_i386.deb	Linux
virtualbox security update(DSA-3384-1) virtualbox_4.1.42-dfsg-1+deb7u1_amd64.deb	Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-342239	Oracle VM VirtualBox (7.1.4)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234