CVE-2008-3431: Oracle VirtualBox Insufficient Input Validation
Oracle VirtualBox Insufficient Input Validation Vulnerability. An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
- CISA KEV-listed (remediation due 2022-03-24)
- EPSS 5.4% (90.4% percentile)