CVE-2015-4896

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availability via unknown vectors related to Core.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-updates/2015-11/msg00000.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-11/msg00172.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2015/dsa-3384Mailing List, Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/77198Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1033880Third Party Advisory, VDB Entry
http://lists.opensuse.org/opensuse-updates/2015-11/msg00000.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-11/msg00172.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2015/dsa-3384Mailing List, Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/77198Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1033880Third Party Advisory, VDB Entry

Timeline

Published: Oct 21, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-48984.0Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 1 CVE-2015-48994.3Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to af CVE-2015-49006.5Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authe CVE-2015-49019.3Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown CVE-2015-49025.3Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to CVE-2015-49035.0Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidential CVE-2015-49044.0Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vec CVE-2015-49054.0Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors rel CVE-2015-49065.0Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors rel CVE-2015-49074.6Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown v CVE-2015-49085.0Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a CVE-2015-49095.0Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remot