[vbox-dev] CTRL+V shared between users and instances?

Frank Mehnert frank.mehnert at oracle.com
Thu Mar 8 22:11:22 GMT 2012


On Thursday 08 March 2012 20:47:39 Stéphane Charette wrote:
> I saw this come across my twitter stream today and wondered if it was real:
> 
> Virtualbox is accidentally sharing clipboards between people accessing VBs
> 
> > on the same host machine. Good for some "WTF?" CTRL+V moments.
> 
> Is this real?  There would be some serious security implications for us if
> this is actually the case.

Any more information about which host and which guest? VirtualBox is a
user-space application and therefore can only access resources available
to the user which started the VM. And the clipboard is no exception from
that rule.

Kind regards,

Frank
-- 
Dr.-Ing. Frank Mehnert
Senior Manager Software Development Desktop Virtualization, VirtualBox
ORACLE Deutschland B.V. & Co. KG | Werkstr. 24 | 71384 Weinstadt, Germany

Hauptverwaltung: Riesstr. 25, D-80992 München
Registergericht: Amtsgericht München, HRA 95603

Komplementärin: ORACLE Deutschland Verwaltung B.V.
Hertogswetering 163/167, 3543 AS Utrecht, Niederlande
Handelsregister der Handelskammer Midden-Niederlande, Nr. 30143697
Geschäftsführer: Jürgen Kunz, Marcel van de Molen, Alexander van der Ven
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://www.virtualbox.org/pipermail/vbox-dev/attachments/20120308/5ef760fb/attachment.sig>


More information about the vbox-dev mailing list