PT-2008-3458 · Realtek · Realtek Hd Audio Codec Drivers

Publicado 2008-04-24 · Atualizado 2018-10-11 · CVE-2008-1932

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Realtek HD Audio Codec Drivers versions prior to 6.0.1.5605

Description The issue is related to an integer overflow in the Realtek HD Audio Codec Drivers, specifically in the RTKVHDA.sys and RTKVHDA64.sys files. This allows local users to execute arbitrary code via a crafted IOCTL request.

Recommendations For versions prior to 6.0.1.5605, update the Realtek HD Audio Codec Drivers to version 6.0.1.5605 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-1932

Produtos afetados

Realtek Hd Audio Codec Drivers

Referências · 9

• 🔥 http://wintercore.com/advisories/advisory_W010408.html · Exploit
• http://frsirt.com/english/advisories/2008/1350/references · Nota
• http://securityfocus.com/archive/1/491249/100/0/threaded · Nota
• http://xforce.iss.net/xforce/xfdb/42079 · Nota
• http://secunia.com/advisories/29953 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1932 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42079 · Nota
• http://securityfocus.com/bid/28909 · Nota
• http://vupen.com/english/advisories/2008/1350/references · Nota