CVE-2004-0015

HIGH 7.2CVE-2004-0015 · Published 03/02/2004 · updated 16/06/2026

In short

CVE-2004-0015 is a HIGH (CVSS 7.2) vulnerability affecting vbox3 (vbox3).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
vbox3 vbox3	`≤ 0.1.8`	No fix yet

vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain privileges.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.