PT-2009-6540 · Intel · Intel Chipset

Joanna Rutkowska · Publicado 2009-12-24 · Atualizado 2017-08-17 · CVE-2009-4419

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel chipsets versions (including Q35, GM45, PM45 Express, Q45, and Q43 Express) in the SINIT Authenticated Code Module (ACM)

Description The issue allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region. This prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.

Recommendations For Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets, consider restricting access to the MCHBAR register to prevent modification and minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2009-4419

Produtos afetados

Intel Chipset

Referências · 10

• http://osvdb.org/61248 · Nota
• http://securityfocus.com/bid/37430 · Nota
• http://vupen.com/english/advisories/2009/3618 · Aviso do Fabricante
• http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54963 · Nota
• http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf · Nota
• http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021&languageid=en-fr · Aviso do Fabricante
• http://secunia.com/advisories/37900 · Aviso do Fabricante
• http://securitytracker.com/id?1023382 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4419 · Nota de Segurança