CVE-2012-3221

Oracle VM VirtualBox 3.2, 4.0, 4.1 - Denial of Service in VirtualBox Core

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-3221. PoCs published by halfdog.

AI-analyzed exploit summary This exploit triggers a local denial-of-service in Oracle VM VirtualBox by executing an interrupt (int $0x8) via inline assembly. The PoC is minimal and directly demonstrates the vulnerability without additional payloads.

Description

Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core. NOTE: The previous information was obtained from the October 2012 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect interrupt handling."

Exploits (1)

exploitdb WORKING POC

by halfdog · cdoslinux_x86-64

https://www.exploit-db.com/exploits/21224

View Code ZIP pw:eip

This exploit triggers a local denial-of-service in Oracle VM VirtualBox by executing an interrupt (int $0x8) via inline assembly. The PoC is minimal and directly demonstrates the vulnerability without additional payloads.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Oracle VM VirtualBox (versions affected by CVE-2012-3221)

No auth needed

Prerequisites: Local access to the target system · Execution privileges to run the compiled binary

MITRE ATT&CK