PT-2008-3457 · Realtek · Realtek Hd Audio Codec Drivers

Published 2008-04-24 · Updated 2018-10-11 · CVE-2008-1931

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Realtek HD Audio Codec Drivers versions prior to 6.0.1.5605

Description The issue allows local users to create, write, and read registry keys via a crafted IOCTL request. This is possible due to a flaw in the RTKVHDA.sys and RTKVHDA64.sys drivers.

Recommendations For versions prior to 6.0.1.5605, update the Realtek HD Audio Codec Drivers to version 6.0.1.5605 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-1931

Affected Products

Realtek Hd Audio Codec Drivers

References · 9

• 🔥 http://wintercore.com/advisories/advisory_W010408.html · Exploit
• http://secunia.com/advisories/29953 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1931 · Security Note
• http://frsirt.com/english/advisories/2008/1350/references · Note
• http://securityfocus.com/archive/1/491249/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41976 · Note
• http://xforce.iss.net/xforce/xfdb/41976 · Note
• http://securityfocus.com/bid/28909 · Note
• http://vupen.com/english/advisories/2008/1350/references · Note