Oracle VirtualBox Guest Additions Arbitrary Write Local Privilege Escalation Exploit

The Oracle VirtualBox Guest Additions Driver (VBoxGuest.sys) present in Oracle VirtualBox is vulnerable to an arbitrary pointer overwrite. This module allows a local unprivileged user to execute arbitrary code with SYSTEM privileges by sending a specially crafted IOCTL (0x22A040) to the vulnerable driver within the Windows Guest OS.
CVE Link
CVE-2014-2477
Exploit Type - Old
Exploits/Local
Exploit Platform
Windows
Exploit Type
Exploits
Local
Product Name
Impact Professional