CVE-2013-0420
published 2013-01-17CVE-2013-0420: Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via…
PriorityP45low2.4CVSS 2.0
AVLACHAuSCNIPAP
EPSS
0.40%
32.8th percentile
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | virtualbox | < virtualbox 4.1.18-dfsg-2 (sid) | virtualbox 4.1.18-dfsg-2 (sid) |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| oracle | virtualization | — | — |
| oracle | virtualization | — | — |
| oracle | virtualization | — | — |
| oracle | vm_virtualbox | — | — |
| oracle | vm_virtualbox | — | — |
| oracle | vm_virtualbox | — | — |
| sun | virtualbox | >= 0 < 4.3.10-dfsg-1 | 4.3.10-dfsg-1 |
CVSS provenance
nvdv2.02.4LOWAV:L/AC:H/Au:S/C:N/I:P/A:P
osv2.4LOW
vendor_debian2.4LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p2wh-44xv-2q95: Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4
ghsa_unreviewed·2022-05-05
CVE-2013-0420 [LOW] GHSA-p2wh-44xv-2q95: Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."
OSV
CVE-2013-0420: Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4
osv·2013-01-17·CVSS 2.4
CVE-2013-0420 [LOW] CVE-2013-0420: Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."
Debian
CVE-2013-0420: virtualbox - Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4...
vendor_debian·2013·CVSS 2.4
CVE-2013-0420 [LOW] CVE-2013-0420: virtualbox - Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4...
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."
Scope: local
sid: resolved (fixed in 4.1.18-dfsg-2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-updates/2013-02/msg00000.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.htmlhttps://bugzilla.novell.com/show_bug.cgi?id=798776https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15763https://www.virtualbox.org/changeset/44055/vboxhttp://lists.opensuse.org/opensuse-updates/2013-02/msg00000.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.htmlhttps://bugzilla.novell.com/show_bug.cgi?id=798776https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15763https://www.virtualbox.org/changeset/44055/vbox
2013-01-17
Published