CVE-2008-3431 — Oracle VirtualBox Insufficient Input Validation Vulnerability
CVE-2008-3431: Oracle VirtualBox Insufficient Input Validation Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Oracle |
| Product | VirtualBox |
| Date added | 2022-03-03 |
| Due date | 2022-03-24 |
| Ransomware campaign use | Unknown |
Description
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2008-3431
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-3431
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog