CVE-2008-3431

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.

• http://secunia.com/advisories/31361Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/4107Broken Link
• http://securitytracker.com/id?1020625Broken Link, Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1Broken Link
• http://virtualbox.org/wiki/ChangelogProduct
• http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerabilityExploit, Third Party Advisory
• http://www.securityfocus.com/archive/1/495095/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/30481Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/2293Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44202Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/6218Exploit, Third Party Advisory, VDB Entry
• http://secunia.com/advisories/31361Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/4107Broken Link
• http://securitytracker.com/id?1020625Broken Link, Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1Broken Link
• http://virtualbox.org/wiki/ChangelogProduct
• http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerabilityExploit, Third Party Advisory
• http://www.securityfocus.com/archive/1/495095/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/30481Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/2293Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44202Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/6218Exploit, Third Party Advisory, VDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-3431US Government Resource

Published

Aug 5, 2008

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3425Unspecified vulnerability in the Sun Java System Web Server …
• CVE-2008-3426Unspecified vulnerability in the Solaris Platform Informatio…
• CVE-2008-3427Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2008-3428Session fixation vulnerability in phpFreeChat 1.1 allows rem…
• CVE-2008-3429Buffer overflow in URI processing in HTTrack and WinHTTrack …
• CVE-2008-3430Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0…
• CVE-2008-3432Heap-based buffer overflow in the mch_expand_wildcards funct…
• CVE-2008-3433SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does…
• CVE-2008-3434Apple iTunes before 10.5.1 does not properly verify the auth…
• CVE-2008-3435LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not pro…
• CVE-2008-3436The GUP generic update process in Notepad++ before 4.8.1 doe…
• CVE-2008-3437OpenOffice.org (OOo) before 2.1.0 does not properly verify t…