Oracle VirtualBox CVE-2015-2594 Vulnerability

Description

Supported versions that are affected are VirtualBox prior to 4.0.32, 4.1.40, 4.2.32 and 4.3.30. Difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized Operating System takeover including arbitrary code execution. Note: This issue affects Windows, Linux and Mac OS X hosts only when guests using bridged networking over Wifi. Solaris hosts don't support this mode and therefore not affected by this issue.

Affected Applications

VirtualBox

CVE References

Other References