Candidate: CVE-2014-2487 PublicDate: 2014-07-17 05:10:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2487 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-4261. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_virtualbox-ose: upstream_virtualbox-ose: needs-triage lucid_virtualbox-ose: ignored (reached end-of-life) precise_virtualbox-ose: DNE trusty_virtualbox-ose: DNE trusty/esm_virtualbox-ose: DNE utopic_virtualbox-ose: DNE vivid_virtualbox-ose: DNE vivid/stable-phone-overlay_virtualbox-ose: DNE vivid/ubuntu-core_virtualbox-ose: DNE wily_virtualbox-ose: DNE devel_virtualbox-ose: DNE Patches_virtualbox: upstream_virtualbox: released (4.3.14) lucid_virtualbox: DNE precise_virtualbox: released (4.1.44-dfsg-1+deb7u1ubuntu1) trusty_virtualbox: released (4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1) trusty/esm_virtualbox: DNE (trusty was released [4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1]) utopic_virtualbox: ignored (reached end-of-life) vivid_virtualbox: not-affected (4.3.26-dfsg-2ubuntu1) vivid/stable-phone-overlay_virtualbox: DNE vivid/ubuntu-core_virtualbox: DNE wily_virtualbox: not-affected (5.0.4-dfsg-2) devel_virtualbox: not-affected (5.0.4-dfsg-2)