PT-2019-3988 · Intel · Intel Proset/Wireless Wifi

Publicado

2019-11-12

·

Atualizado

2020-08-24

·

CVE-2019-11153

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Intel(R) PROSet/Wireless WiFi Software extension DLL versions prior to 21.40
Description The issue is related to memory corruption in the Intel(R) PROSet/Wireless WiFi Software extension DLL. It may allow an authenticated user to potentially enable escalation of privilege, information disclosure, and a denial of service via local access. The vulnerability is associated with a buffer overflow in memory, which can be exploited by an attacker to elevate privileges, cause a denial of service, and disclose protected information.
Recommendations For versions prior to 21.40, update to version 21.40 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

Correção

Memory Corruption

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2019-04519
CVE-2019-11153

Produtos afetados

Intel Proset/Wireless Wifi