CVE-2015-4523
CRITICALBlue Coat Malware Analysis Appliance <4.2.5 & Malware Analyzer G2 <3.5 - RCE via VM Protection Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-4523. PoCs published by Metasploit.
AI-analyzed exploit summary This Metasploit module exploits a memory corruption vulnerability in VirtualBox's 3D acceleration feature (CVE-2014-0983) to escape from a guest VM to the host. It uses a sequence of crafted HGCM messages to trigger an out-of-bounds array access and achieve RCE via a ROP chain.
Description
Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.
Exploits (1)
This Metasploit module exploits a memory corruption vulnerability in VirtualBox's 3D acceleration feature (CVE-2014-0983) to escape from a guest VM to the host. It uses a sequence of crafted HGCM messages to trigger an out-of-bounds array access and achieve RCE via a ROP chain.
References (1)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H