ByteOS Network

CVE Vulnerability Details :

CVE-2014-0983

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-28 Mar, 2014 | 21:00

Updated At-06 Aug, 2024 | 09:34

▼CVE Numbering Authority (CNA)

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server via certain CR_MESSAGE_OPCODES messages with a crafted index, which are not properly handled by the (1) CR_VERTEXATTRIB4NUBARB_OPCODE to the crServerDispatchVertexAttrib4NubARB function, (2) CR_VERTEXATTRIB1DARB_OPCODE to the crServerDispatchVertexAttrib1dARB function, (3) CR_VERTEXATTRIB1FARB_OPCODE to the crServerDispatchVertexAttrib1fARB function, (4) CR_VERTEXATTRIB1SARB_OPCODE to the crServerDispatchVertexAttrib1sARB function, (5) CR_VERTEXATTRIB2DARB_OPCODE to the crServerDispatchVertexAttrib2dARB function, (6) CR_VERTEXATTRIB2FARB_OPCODE to the crServerDispatchVertexAttrib2fARB function, (7) CR_VERTEXATTRIB2SARB_OPCODE to the crServerDispatchVertexAttrib2sARB function, (8) CR_VERTEXATTRIB3DARB_OPCODE to the crServerDispatchVertexAttrib3dARB function, (9) CR_VERTEXATTRIB3FARB_OPCODE to the crServerDispatchVertexAttrib3fARB function, (10) CR_VERTEXATTRIB3SARB_OPCODE to the crServerDispatchVertexAttrib3sARB function, (11) CR_VERTEXATTRIB4DARB_OPCODE to the crServerDispatchVertexAttrib4dARB function, (12) CR_VERTEXATTRIB4FARB_OPCODE to the crServerDispatchVertexAttrib4fARB function, and (13) CR_VERTEXATTRIB4SARB_OPCODE to the crServerDispatchVertexAttrib4sARB function.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

References

Hyperlink	Resource
http://www.exploit-db.com/exploits/32208	exploit x_refsource_EXPLOIT-DB
https://security.gentoo.org/glsa/201612-27	vendor-advisory x_refsource_GENTOO
http://secunia.com/advisories/57384	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/531418/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.debian.org/security/2014/dsa-2904	vendor-advisory x_refsource_DEBIAN
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html	x_refsource_CONFIRM
https://www.virtualbox.org/changeset/50441/vbox	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2014/Mar/95	mailing-list x_refsource_FULLDISC
http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities	x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.exploit-db.com/exploits/32208	exploit x_refsource_EXPLOIT-DB x_transferred
https://security.gentoo.org/glsa/201612-27	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/57384	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/531418/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.debian.org/security/2014/dsa-2904	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html	x_refsource_CONFIRM x_transferred
https://www.virtualbox.org/changeset/50441/vbox	x_refsource_CONFIRM x_transferred
http://seclists.org/fulldisclosure/2014/Mar/95	mailing-list x_refsource_FULLDISC x_transferred
http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities	x_refsource_MISC x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References