CVE

CVE-2008-3431

Oracle VirtualBox Insufficient Input Validation Vulnerability

Oracle · VirtualBox

Date added (CISA)

2022-03-03

Remediation due

2022-03-24

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.