PT-2018-11048 · Intel · Intel Trace Analyzer+1

Published 2018-11-14 · Updated 2020-08-24 · CVE-2018-12174

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Parallel Studio XE 2018 Update 3

Description A heap overflow issue in Intel Trace Analyzer 2018 may allow an authenticated user to potentially escalate privileges via local access.

Recommendations For Intel Parallel Studio XE 2018 Update 3, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-12174

Affected Products

Intel Parallel Studio Xe

Intel Trace Analyzer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-12174 · Security Note
• https://osv.dev/vulnerability/CVE-2018-12174 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00180.html · Vendor Advisory
• http://securityfocus.com/bid/106038 · Note