PT-2017-3630 · Intel · Intel Graphics Driver

Published 2017-12-12 · Updated 2017-12-27 · CVE-2017-5717

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel Graphics Driver (affected versions not specified)

Description: The issue is related to a type confusion in the Content Protection HECI Service of the Intel Graphics Driver, which can be exploited by an unprivileged user to elevate privileges via local access. This is due to errors in type conversion. An attacker can exploit this issue to gain higher privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

BDU:2018-00656

CVE-2017-5717

Affected Products

Intel Graphics Driver

References · 6

• 🔥 https://exploit-db.com/exploits/43373 · Exploit
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00095&languageid=en-fr · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-5717 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00656 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-5717 · Security Note
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00095&languageid=en-fr · Note