Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2014-4228

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via vectors related to Graphics driver (WDDM) for Windows guests.

POC

Reference

- http://seclists.org/fulldisclosure/2014/Dec/23

- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

- http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Github

No PoCs found on GitHub currently.