CVE-2014-6589

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.

Published Bysecalert_us@oracle.com

Published DateJan 21, 2015, 15:28

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

3.2

Vector String

AV:L/AC:L/Au:S/C:N/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

PARTIAL

References

http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
https://security.gentoo.org/glsa/201612-27

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

3.2

Vector String

AV:L/AC:L/Au:S/C:N/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

PARTIAL