PT-2019-10727 · Intel · Intel Usb 3.0 Extensible Host Controller Driver

Publicado 2019-02-18 · Atualizado 2019-02-20 · CVE-2018-3700

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 versions prior to 5.0.4.43v2

Description A code injection issue in the installer may allow a user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 5.0.4.43v2, update to version 5.0.4.43v2 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2018-3700

Produtos afetados

Intel Usb 3.0 Extensible Host Controller Driver

Referências · 4

• http://securityfocus.com/bid/107073 · Nota
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00200.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-3700 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-3700 · Nota de Segurança