{"api_version":"1","generated_at":"2026-07-23T09:48:20+00:00","cve":"CVE-2014-0981","urls":{"html":"https://cve.report/CVE-2014-0981","api":"https://cve.report/api/cve/CVE-2014-0981.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-0981","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0981"},"summary":{"title":"CVE-2014-0981","description":"VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption.  NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.","state":"PUBLISHED","assigner":"mitre","published_at":"2014-03-31 14:58:35","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-399","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.4","severity":"","vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/531418/100/0/threaded","name":"http://www.securityfocus.com/archive/1/531418/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html","name":"http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Critical Patch Update - April 2014","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2014/Mar/95","name":"http://seclists.org/fulldisclosure/2014/Mar/95","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Full Disclosure: CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2014/dsa-2904","name":"http://www.debian.org/security/2014/dsa-2904","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-2904-1 virtualbox","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.virtualbox.org/changeset/50437/vbox","name":"https://www.virtualbox.org/changeset/50437/vbox","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Changeset 50437 – Oracle VM VirtualBox","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities","name":"http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Oracle VirtualBox 3D Acceleration Memory Corruption Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/57384","name":"http://secunia.com/advisories/57384","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA57384 - Oracle VirtualBox 3D Acceleration Multiple Privilege Escalation Vulnerabilities - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/32208","name":"http://www.exploit-db.com/exploits/32208","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle VirtualBox 3D Acceleration - Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://security.gentoo.org/glsa/201612-27","name":"https://security.gentoo.org/glsa/201612-27","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VirtualBox: Multiple vulnerabilities (GLSA 201612-27) — Gentoo security","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0981","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0981","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.2.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:34:40.679Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"32208","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/32208"},{"name":"GLSA-201612-27","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"https://security.gentoo.org/glsa/201612-27"},{"name":"57384","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/57384"},{"name":"20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/531418/100/0/threaded"},{"name":"DSA-2904","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2014/dsa-2904"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.virtualbox.org/changeset/50437/vbox"},{"name":"20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2014/Mar/95"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-03-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption.  NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-09T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"32208","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/32208"},{"name":"GLSA-201612-27","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"https://security.gentoo.org/glsa/201612-27"},{"name":"57384","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/57384"},{"name":"20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/531418/100/0/threaded"},{"name":"DSA-2904","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2014/dsa-2904"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://www.virtualbox.org/changeset/50437/vbox"},{"name":"20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2014/Mar/95"},{"tags":["x_refsource_MISC"],"url":"http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2014-0981","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption.  NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"32208","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/32208"},{"name":"GLSA-201612-27","refsource":"GENTOO","url":"https://security.gentoo.org/glsa/201612-27"},{"name":"57384","refsource":"SECUNIA","url":"http://secunia.com/advisories/57384"},{"name":"20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/531418/100/0/threaded"},{"name":"DSA-2904","refsource":"DEBIAN","url":"http://www.debian.org/security/2014/dsa-2904"},{"name":"http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html"},{"name":"https://www.virtualbox.org/changeset/50437/vbox","refsource":"CONFIRM","url":"https://www.virtualbox.org/changeset/50437/vbox"},{"name":"20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2014/Mar/95"},{"name":"http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities","refsource":"MISC","url":"http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2014-0981","datePublished":"2014-03-28T21:00:00.000Z","dateReserved":"2014-01-07T00:00:00.000Z","dateUpdated":"2024-08-06T09:34:40.679Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-03-31 14:58:35","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-399","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DB32F058-DDF8-4942-8D40-E3F97E4A44CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C6BF7C87-3D44-4BAD-8A13-A0D3CEF6B413"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39A70834-328F-4095-8515-DCF00EB7F41A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C9EDA1CE-050F-4386-AC6D-690D4337ACF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"783B92AB-5FAA-43A6-8525-9725289B6785"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C7AFC93C-A4AC-4189-B467-07C4CC7D2810"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"90379DE6-0E7E-4577-AF55-51801EEC5996"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"8405F02F-805E-4472-A6B3-EC7746E25141"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.16:*:*:*:*:*:*:*","matchCriteriaId":"71F68055-FD2D-4B4C-A0C7-EC507D4D82B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.18:*:*:*:*:*:*:*","matchCriteriaId":"2C5E21CB-335F-4DE0-A578-C3097E0D5AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.2.20:*:*:*:*:*:*:*","matchCriteriaId":"C50DDA06-9C87-494C-B3F4-C8919FB47A27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7C652C69-3F7D-4527-9D8B-81C95D2B5194"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A0D46897-F49D-4D9A-819A-846F6833F3B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ED513E51-2F4F-4CBA-BA4E-0960C76775D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"22B0A194-02D5-4F3B-9317-2AB267D7E447"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"981","Ordinal":"1","Title":"CVE-2014-0981","CVE":"CVE-2014-0981","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"981","Ordinal":"1","NoteData":"VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption.  NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.","Type":"Description","Title":"CVE-2014-0981"},{"CveYear":"2014","CveId":"981","Ordinal":"2","NoteData":"2014-03-28","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"981","Ordinal":"3","NoteData":"2018-10-09","Type":"Other","Title":"Modified"}]}}}