PT-2008-3457 · Realtek · Realtek Hd Audio Codec Drivers

Publicado 2008-04-24 · Atualizado 2018-10-11 · CVE-2008-1931

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Realtek HD Audio Codec Drivers versions prior to 6.0.1.5605

Description The issue allows local users to create, write, and read registry keys via a crafted IOCTL request. This is possible due to a flaw in the RTKVHDA.sys and RTKVHDA64.sys drivers.

Recommendations For versions prior to 6.0.1.5605, update the Realtek HD Audio Codec Drivers to version 6.0.1.5605 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1931

Produtos afetados

Realtek Hd Audio Codec Drivers

Referências · 9

• 🔥 http://wintercore.com/advisories/advisory_W010408.html · Exploit
• http://frsirt.com/english/advisories/2008/1350/references · Nota
• http://securityfocus.com/archive/1/491249/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41976 · Nota
• http://secunia.com/advisories/29953 · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/41976 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1931 · Nota de Segurança
• http://securityfocus.com/bid/28909 · Nota
• http://vupen.com/english/advisories/2008/1350/references · Nota