CVE-2012-3221

Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4...

2.1 LowPublic exploitFix available

CVE-2012-3221 is a low vulnerability (CVSS 2.1) in Oracle Virtualization, published October 17, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.79%, the 56th percentile. Fixed in virtualbox-ose 3.2.10-dfsg-1+squeeze1.

Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core. NOTE: The previous information was obtained from the October 2012 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect interrupt handling."

Exploit likelihood

0.79%Down 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Record: CVE-2012-3221
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-3221
Updated: 2026-11-02

EUVDEUVD-2012-3199 No score

Record: EUVD-2012-3199
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pxpj-94wm-p9ff No score

Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4...

Record: GHSA-pxpj-94wm-p9ff
Updated: 2026-11-02

Affected products

oracle virtualization

Affected packages

Affected packages
Package	Affected	Fixed
`virtualbox-ose` Debian:6.0	before 3.2.10-dfsg-1+squeeze1, plus listed versions 3.2.10-dfsg-1	3.2.10-dfsg-1+squeeze1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Oracle VM VirtualBox 4.1 - Local Denial of Service	2012-09-10

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV