VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption. NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.

The remote host is affected by the vulnerability described in GLSA-201612-27 (VirtualBox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VirtualBox. Please       review the CVE identifiers referenced below for details.
  Impact :

    Local attackers could cause a Denial of Service condition, execute       arbitrary code, or escalate their privileges.
  Workaround :

    There is no known workaround at this time.

Francisco Falcon discovered that missing input sanitizing in the 3D acceleration code in VirtualBox could lead to the execution of arbitrary code on the host system.

The remote host contains a version of Oracle VM VirtualBox that is 3.2.x prior to 3.2.22, 4.0.24, 4.1.32, 4.2.24 or 4.3.8. It is, therefore, potentially affected by the following vulnerabilities :

  - An input validation error exists in the function     'crNetRecvReadback' in the file     'GuestHost/OpenGL/util/net.c' related to handling     CR_MESSAGE_READBACK and CR_MESSAGE_WRITEBACK messages     that could allow memory corruption leading to     application crashes and possibly arbitrary code     execution. (CVE-2014-0981)

  - An input validation error exists related to the     Chromium server and the handling of     CR_VERTEXATTRIB4NUBARB_OPCODE messages that could allow     memory corruption leading to application crashes and     possibly arbitrary code execution. (CVE-2014-0983)

ID	Name	Product	Family	Severity
95695	GLSA-201612-27 : VirtualBox: Multiple vulnerabilities (Venom)	Nessus	Gentoo Local Security Checks	medium
73534	Debian DSA-2904-1 : virtualbox - security update	Nessus	Debian Local Security Checks	medium
72985	Oracle VM VirtualBox < 3.2.22 / 4.0.24 / 4.1.32 / 4.2.24 / 4.3.8 Multiple Memory Corruption	Nessus	Windows	medium

Detections

Analytics

CVE-2014-0981

high

Tenable Plugins

medium

medium

medium