Executive Summary

Informations
Name	CVE-2010-4414	First vendor Publication	2011-01-19
Vendor	Cve	Last vendor Modification	2012-12-05

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:S/C:C/I:C/A:C)
Cvss Base Score	6.8	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	3.1	Authentification	Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4414

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:12576
Oval ID:	oval:org.mitre.oval:def:12576
Title:	Unspecified vulnerability in Oracle VM VirtualBox 4.0
Description:	Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4414	Version:	5
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Oracle VM VirtualBox
Definition Synopsis:
VirtualBox is installed AND Check if Oracle VirtualBox version equal to 4.0

CPE : Common Platform Enumeration

Type	Description	Count
Application	Oracle Vm Virtualbox cpe:/a:oracle:vm_virtualbox:4.0	1

Open Source Vulnerability Database (OSVDB)

id	Description
70549	Oracle VM VirtualBox Extensions Unspecified Local Issue

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/45876
CONFIRM	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
GENTOO	http://security.gentoo.org/glsa/glsa-201204-01.xml
SECUNIA	http://secunia.com/advisories/42985 http://secunia.com/advisories/48755
VUPEN	http://www.vupen.com/english/advisories/2011/0152
XF	http://xforce.iss.net/xforce/xfdb/64810

Alert History

Date	Informations
2013-05-10 23:37:59	Multiple Updates
2012-12-06 13:19:13	Multiple Updates