PT-2016-4839 · Intel · Intel Driver Update Utility

Publicado 2016-01-29 · Atualizado 2018-10-09 · CVE-2016-1493

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel Driver Update Utility versions prior to 2.4

Description The issue allows man-in-the-middle attackers to execute arbitrary code via a crafted file because driver updates are retrieved in cleartext.

Recommendations For versions prior to 2.4, update to version 2.4 or later to resolve the issue.

Correção

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-345

Identificadores relacionados

CVE-2016-1493

Produtos afetados

Intel Driver Update Utility

Referências · 7

• http://packetstormsecurity.com/files/135314/Intel-Driver-Update-Utility-2.2.0.5-Man-In-The-Middle.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1493 · Nota de Segurança
• http://coresecurity.com/advisories/intel-driver-update-utility-mitm · Nota
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00048&languageid=en-fr · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1493 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2016/Jan/56 · Nota
• http://securityfocus.com/archive/1/537327/100/0/threaded · Nota