CVE-2008-3431
- State
- Published
- Severity
- 8.8 High
- Published
- Aug 5, 2008
- Updated
- Oct 22, 2025
- Reserved
- Jul 31, 2008
Description
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 30481vdb-entry
- 4107third-party-advisory
- 6218exploit
- 240095vendor-advisory
- 31361third-party-advisory
- http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability
- sun-xvmvirtualbox-privilege-escalation(44202)vdb-entry
- ADV-2008-2293vdb-entry
- http://virtualbox.org/wiki/Changelog
- 1020625vdb-entry
- 20080804 CORE-2008-0716 - Sun xVM VirtualBox Privilege Escalation Vulnerabilitymailing-list
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-3431government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.