CVE-2014-0407
Summary
| CVE | CVE-2014-0407 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-01-15 16:08:09 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0405. |
Risk And Classification
Primary CVSS: v2.0 3.5 from [email protected]
AV:L/AC:H/Au:S/C:P/I:P/A:P
EPSS: 0.000760000 probability, percentile 0.226580000 (date 2026-05-02)
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
HighAuthentication
SingleConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:L/AC:H/Au:S/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Vm Virtualbox | 3.2.0 | All | All | All |
| Application | Oracle | Vm Virtualbox | 3.2.10 | All | All | All |
| Application | Oracle | Vm Virtualbox | 3.2.12 | All | All | All |
| Application | Oracle | Vm Virtualbox | 3.2.14 | All | All | All |
| Application | Oracle | Vm Virtualbox | 3.2.16 | All | All | All |
| Application | Oracle | Vm Virtualbox | 3.2.2 | All | All | All |
| Application | Oracle | Vm Virtualbox | 3.2.4 | All | All | All |
| Application | Oracle | Vm Virtualbox | 3.2.6 | All | All | All |
| Application | Oracle | Vm Virtualbox | 3.2.8 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.0 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.10 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.12 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.14 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.16 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.18 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.2 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.4 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.6 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.0.8 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.0 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.10 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.12 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.14 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.16 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.18 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.2 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.20 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.22 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.24 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.26 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.4 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.6 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.1.8 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.2.0 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.2.10 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.2.12 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.2.14 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.2.16 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.2.2 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.2.4 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.2.6 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.2.8 | All | All | All |
| Application | Oracle | Vm Virtualbox | 4.3.0 | All | All | All |
| Application | Oracle | Vm Virtualbox | All | All | All | All |
| Application | Oracle | Vm Virtualbox | All | All | All | All |
| Application | Oracle | Vm Virtualbox | All | All | All | All |
| Application | Oracle | Vm Virtualbox | All | All | All | All |
| Application | Oracle | Vm Virtualbox | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Oracle Critical Patch Update - January 2014 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Vendor Advisory |
| Security Advisory SA56490 - Oracle VirtualBox Multiple Vulnerabilities - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Oracle Virtualization Bugs Let Remote and Local Users Access and Modify Data and Deny Service - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Debian -- Security Information -- DSA-2878-1 virtualbox | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| Oracle VM VirtualBox CVE-2014-0407 Local Security Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| osvdb.org/102058 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| RETIRED: Oracle January 2014 Critical Patch Update Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.