PT-2008-3458 · Realtek · Realtek Hd Audio Codec Drivers

Published 2008-04-24 · Updated 2018-10-11 · CVE-2008-1932

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Realtek HD Audio Codec Drivers versions prior to 6.0.1.5605

Description The issue is related to an integer overflow in the Realtek HD Audio Codec Drivers, specifically in the RTKVHDA.sys and RTKVHDA64.sys files. This allows local users to execute arbitrary code via a crafted IOCTL request.

Recommendations For versions prior to 6.0.1.5605, update the Realtek HD Audio Codec Drivers to version 6.0.1.5605 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-1932

Affected Products

Realtek Hd Audio Codec Drivers

References · 9

• 🔥 http://wintercore.com/advisories/advisory_W010408.html · Exploit
• http://secunia.com/advisories/29953 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1932 · Security Note
• http://frsirt.com/english/advisories/2008/1350/references · Note
• http://securityfocus.com/archive/1/491249/100/0/threaded · Note
• http://xforce.iss.net/xforce/xfdb/42079 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42079 · Note
• http://securityfocus.com/bid/28909 · Note
• http://vupen.com/english/advisories/2008/1350/references · Note