Info

Disclosure

Jan 17, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jan 17, 2012

Description

Oracle VM VirtualBox contains a flaw related to the Shared Folders component that may allow a local attacker to affect confidentiality and integrity. No further details have been provided.

Classification

Location: Local Access Required
Attack Type: Attack Type Unknown
Impact: Loss of Confidentiality, Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Oracle has released a patch to address this vulnerability. Check the vendor advisory or solution in the references section.

Products

Oracle Corporation

VM VirtualBox

4.1

References

Security Tracker: 1026531
CVE ID: 2012-0111 (see also: NVD)
SCIP VulDB ID: 4567
Secunia Advisory ID: 47626 48755 50897
Related OSVDB ID: 78442
Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-updates/2012-10/msg00041.html
http://www.gentoo.org/security/en/glsa/glsa-201204-01.xml
Vendor Specific Advisory URL: http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html#AppendixOVIR

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/78443