Search for vulnerabilities
| Vulnerability ID | VCID-tcbn-c6e2-zycb |
| Aliases |
CVE-2014-2477
|
| Summary | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486. |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| epss | 0.07491 | https://api.first.org/data/v1/epss?cve=CVE-2014-2477 |
| cvssv2 | 3.6 | https://nvd.nist.gov/vuln/detail/CVE-2014-2477 |
| Data source | Metasploit |
|---|---|
| Description | A vulnerability within the VBoxGuest driver allows an attacker to inject memory they control into an arbitrary location they define. This can be used by an attacker to overwrite HalDispatchTable+0x4 and execute arbitrary code by subsequently calling NtQueryIntervalProfile on Windows XP SP3 systems. This has been tested with VBoxGuest Additions up to 4.3.10r93012. |
| Note | Reliability: - unknown-reliability Stability: - unknown-stability SideEffects: - unknown-side-effects |
| Ransomware campaign use | Unknown |
| Source publication date | July 15, 2014 |
| Platform | Windows |
| Source URL | https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/local/virtual_box_guest_additions.rb |
| Data source | Exploit-DB |
|---|---|
| Date added | Aug. 13, 2014 |
| Description | Oracle VM VirtualBox Guest Additions 4.3.10r93012 - 'VBoxGuest.sys' Local Privilege Escalation (Metasploit) |
| Ransomware campaign use | Known |
| Source publication date | Aug. 13, 2014 |
| Exploit type | local |
| Platform | windows |
| Source update date | Oct. 27, 2016 |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.91748 |
| EPSS Score | 0.07491 |
| Published At | April 1, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-04-01T17:43:30.143160+00:00 | EPSS Importer | Import | https://epss.cyentia.com/epss_scores-current.csv.gz | 38.0.0 |