PT-2017-16668 · Intel · Intel Trace Analyzer/Collector+12

Publicado 2017-02-28 · Atualizado 2019-10-03 · CVE-2017-5682

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks versions prior to 2017 Update 2

Description The issue allows an attacker to launch a process with escalated privileges.

Recommendations For versions prior to 2017 Update 2, update to 2017 Update 2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-5682

Produtos afetados

Intel Integrated Performance Primitives (Ipp) Cryptography

Intel Advisor

Intel Data Analytics Acceleration Library

Intel Inspector

Intel Integrated Performance Primitives

Intel Mpi Library

Intel Math Kernel Library

Intel Pset Application

Intel Parallel Studio Xe

Intel System Studio

Intel Threading Building Blocks

Intel Trace Analyzer/Collector

Intel Vtune Amplifier

Referências · 4

• http://securityfocus.com/bid/96482 · Nota
• https://osv.dev/vulnerability/CVE-2017-5682 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5682 · Nota de Segurança
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00070&languageid=en-fr · Aviso do Fabricante