Sun VirtualBox Guest Additions Local Denial Of Service Vulnerability

Bugtraq ID:	37024
Class:	Unknown
CVE:	CVE-2009-3940
Remote:	No
Local:	Yes
Published:	Nov 16 2009 12:00AM
Updated:	Mar 10 2010 08:02PM
Credit:	Sun
Vulnerable:	Sun VirtualBox Guest Additions 3.0.8 Sun VirtualBox Guest Additions 2.0.10 Sun VirtualBox Guest Additions 2.2 Sun VirtualBox Guest Additions 2.1 Sun VirtualBox Guest Additions 1.6 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Gentoo Linux
Not Vulnerable:	Sun VirtualBox Guest Additions 3.0.10 Sun VirtualBox Guest Additions 2.0.12

Sun VirtualBox Guest Additions Local Denial Of Service Vulnerability

Sun VirtualBox Guest Additions is prone to a local denial-of-service vulnerability.

Local attackers can exploit the issue to cause denial-of-service conditions in the guest operating system.

The issue affects the following:

Sun xVM VirtualBox Guest Additions 1.6 releases
Sun xVM VirtualBox Guest Additions 2.0.10 and priorversions
Sun xVM VirtualBox Guest Additions 2.1 releases
Sun xVM VirtualBox Guest Additions 2.2 releases
Sun VirtualBox Additions 3.0.8 and prior

Sun VirtualBox Guest Additions Local Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun VirtualBox Guest Additions Local Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Sun VirtualBox Guest Additions Local Denial Of Service Vulnerability

References:

• VirtualBox Homepage (Sun Microsystems)
  
• Security Vulnerability in VirtualBox Guest Additions May Lead to Denial of Servi (Sun)