CVE-2013-0420

Severity: low (CVSS 2.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-01-17 · updated 2026-06-16

Description

Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."

Affected products

Opensuse: 12.1, 12.2
Oracle Virtualization: 4.0, 4.1, 4.2
Oracle Corporation VM VirtualBox: 4.0, 4.1.0, 4.2.0

References

http://lists.opensuse.org/opensuse-updates/2013-02/msg00000.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
https://bugzilla.novell.com/show_bug.cgi?id=798776
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15763
https://www.virtualbox.org/changeset/44055/vbox
http://lists.opensuse.org/opensuse-updates/2013-02/msg00000.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
https://bugzilla.novell.com/show_bug.cgi?id=798776
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15763
https://www.virtualbox.org/changeset/44055/vbox

Get alerted when CVE-2013-0420 or the next vulnerability affects your stack