mansk1es/CVE-2024-21111 — reverse-engineered prompt

I want a small Windows security research project around CVE 2024 21111 in older Oracle VirtualBox versions. Please make it explain in simple terms how the log rotation in ProgramData can end up following links and cause unintended file delete or file move behavior, and why that matters for local privilege escalation. Include a safe checker that tells me whether the installed VirtualBox version looks affected, what folders and permissions are relevant, and what the fix or mitigation is.

Also add a harmless lab demo that only works on disposable test files in a temp folder so I can see the behavior without giving me a real privilege escalation tool. A short README should walk me through setup, expected results, cleanup, and responsible use. If you need details, look up current public docs and advisories online, but keep the repo focused on defensive understanding and safe reproduction only.