Vulnerability CVE-2012-0105

Vulnerability Name:

CVE-2012-0105 (CCN-72511)

Assigned:

2011-12-12

Published:

2012-01-17

Updated:

2017-09-19

Summary:

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Guest Additions.

CVSS v3 Severity:

4.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

3.7 Low (CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P)
2.7 Low (Temporal CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): High Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

3.7 Low (CCN CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P)
2.7 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): High Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2012-0105

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2012:1323

Source: OSVDB
Type: UNKNOWN
78442

Source: CCN
Type: SA47626
Oracle VM VirtualBox Two Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
48755

Source: SECUNIA
Type: UNKNOWN
50897

Source: GENTOO
Type: UNKNOWN
GLSA-201204-01

Source: CCN
Type: Oracle Critical Patch Update Advisory - January 2012
Oracle Critical Patch Update Advisory - January 2012

Source: CONFIRM
Type: Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html

Source: CCN
Type: OSVDB ID: 78442
Oracle VM VirtualBox Windows Guest Additions Component Unspecified Local Issue

Source: CCN
Type: BID-51461
Oracle VM VirtualBox CVE-2012-0105 Local Vulnerability

Source: XF
Type: UNKNOWN
virtualization-vmvirtualbox-cve20120105(72511)

Source: XF
Type: UNKNOWN
virtualization-vmvirtualbox-cve20120105(72511)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:16235

Vulnerable Configuration:

Configuration 1:

cpe:/a:oracle:virtualization:4.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:vm_virtualbox:4.1:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:oracle:virtualization:4.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:vm_virtualbox:4.1:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:16235	V	Unspecified vulnerability in the Oracle VM VirtualBox 4.1 component	2014-02-17
oval:org.opensuse.security:def:20120105	V	CVE-2012-0105	2014-01-28
oval:com.ubuntu.precise:def:20120105000	V	CVE-2012-0105 on Ubuntu 12.04 LTS (precise) - low.	2012-01-18

BACK