The 2014 Pwnie Nominee For Best Privilege Escalation Bug

VirtualBox VM Breakout using 3D Acceleration (CVE-2014-0981)

Credit: Francisco Falcon

Oracle’s VirtualBox allows guest virtual machines to perform quick 3D operations. Francisco found several vulnerabilities in this interface and exploited them to escape from the guest virtual machine into the host.

 (CVE-2014-0981)