PT-2009-6540 · Intel · Intel Chipset

Joanna Rutkowska · Published 2009-12-24 · Updated 2017-08-17 · CVE-2009-4419

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel chipsets versions (including Q35, GM45, PM45 Express, Q45, and Q43 Express) in the SINIT Authenticated Code Module (ACM)

Description The issue allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region. This prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.

Recommendations For Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets, consider restricting access to the MCHBAR register to prevent modification and minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2009-4419

Affected Products

Intel Chipset

References · 10

• http://vupen.com/english/advisories/2009/3618 · Vendor Advisory
• http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021&languageid=en-fr · Vendor Advisory
• http://secunia.com/advisories/37900 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4419 · Security Note
• http://osvdb.org/61248 · Note
• http://securityfocus.com/bid/37430 · Note
• http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54963 · Note
• http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf · Note
• http://securitytracker.com/id?1023382 · Note