{"id":"CVE-2011-2300","aliases":["DEBIAN-CVE-2011-2300","EUVD-2011-2289","GHSA-3mmj-45hw-28gw"],"status":"published","title":"Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows...","description":"Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.","severity":{"version":"2.0","score":3.7,"vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0042,"percentile":0.36628,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2011-07-21T00:00:00Z","modified":"2026-10-23T17:47:48Z","fixes":[{"ecosystem":"Debian:12","package":"virtualbox-guest-additions-iso","fixed_in":["4.0.10-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"virtualbox-guest-additions-iso","fixed_in":["4.0.10-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"virtualbox-guest-additions-iso","fixed_in":["4.0.10-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"virtualbox-guest-additions-iso","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-1"}]}],"versions":["4.0.8-1"]},{"source":"osv","ecosystem":"Debian:13","package":"virtualbox-guest-additions-iso","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-1"}]}],"versions":["4.0.8-1"]},{"source":"osv","ecosystem":"Debian:14","package":"virtualbox-guest-additions-iso","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-1"}]}],"versions":["4.0.8-1"]}],"products":[{"vendor":"oracle","product":"vm_virtualbox"}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13148","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA11-201A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://security.gentoo.org/glsa/glsa-201204-01.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/48755","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Permissions Required","Third Party Advisory","advisory","report"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.securitytracker.com/id?1025805","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2300"},{"url":"https://github.com/advisories/GHSA-3mmj-45hw-28gw"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-2300","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-2300","description":"Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.","status":"published","published":"2011-07-21T00:00:00Z","modified":"2024-08-06T22:53:17.543Z","updated_at":"2026-11-02T14:35:36.603688Z"}],"euvd":[{"id":"EUVD-2011-2289","description":"Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.","status":"published","published":"2011-07-21T00:00:00Z","modified":"2024-08-06T22:53:17Z","updated_at":"2026-11-03T01:55:52.768318Z"}],"ghsa":[{"id":"GHSA-3mmj-45hw-28gw","title":"Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows...","description":"Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.","status":"published","published":"2022-05-17T01:01:29Z","modified":"2023-02-03T05:02:55Z","updated_at":"2026-11-02T14:53:15.749583Z"}],"nvd":[{"id":"CVE-2011-2300","description":"Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.","status":"published","published":"2011-07-21T00:55:02.253Z","modified":"2026-06-16T23:31:04.363Z","cvss":[{"version":"2.0","score":3.7,"vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:02:09.182398Z"}],"osv":[{"id":"CVE-2011-2300","description":"Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.","status":"published","published":"2011-07-21T00:55:02Z","modified":"2026-04-10T03:41:49.953747Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-2300","description":"Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.","status":"published","published":"2011-07-21T00:55:02.253Z","modified":"2026-10-23T17:47:48.439746355Z","updated_at":"2026-11-02T15:45:24.612044Z"}]}}