Unscored severity · published Jan 17, 2013
CVE-2013-0420
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensuse · Opensuse
12.1; 12.2 · source: NVD
VV
VM Virtualbox · Oracle
4.0; 4.1.0; 4.2.0 · source: NVD
VI
Virtualization · Oracle
4.0; 4.1; 4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0420
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0420
Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2013-02/msg00000.html
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
Patch
https://bugzilla.novell.com/show_bug.cgi?id=798776
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15763
Exploit
https://www.virtualbox.org/changeset/44055/vbox
More from Opensuse
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability