PT-2007-1491 · Openbsd+1 · Openbsd+2

Theo De Raadt · Published 2007-07-03 · Updated 2008-09-05 · CVE-2006-7215

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Intel Core 2 Extreme processor X6800 Intel Core 2 Duo desktop processor E6000 Intel Core 2 Duo desktop processor E4000

Description The issue involves the incorrect setting of the memory page Access (A) bit under certain circumstances, specifically when the code segment limit is near the end of a code page. This has an unknown impact and attack vectors on certain operating systems, excluding OpenBSD.

Recommendations For Intel Core 2 Extreme processor X6800, consider consulting Intel support for guidance on potential workarounds or fixes. For Intel Core 2 Duo desktop processor E6000, consult Intel support for any available patches or configuration changes. For Intel Core 2 Duo desktop processor E4000, reach out to Intel support for information on resolving the issue. As a general mitigation measure, ensure that operating systems and software are updated to the latest versions to minimize potential risks.

Fix

Related Identifiers

CVE-2006-7215

Affected Products

Intel Core 2 Duo

Intel Core 2 Extreme

Openbsd

References · 7

• http://securityfocus.com/bid/24702 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-7215 · Security Note
• http://seclists.org/fulldisclosure/2007/Jun/0605.html · Note
• http://geek.com/images/geeknews/2006Jan/core_duo_errata__2006_01_21__full.gif · Note
• http://matasano.com/log/894/theo-de-raadt-intel-core-2-bugs-assuredly-exploitable-from-userland · Note
• http://download.intel.com/design/processor/specupdt/31327914.pdf · Note
• http://marc.info/?l=openbsd-misc&m=118296441702631&w=2 · Note