PT-2018-8264 · Intel · Intel Software Guard Extensions Platform Software

Jann Horn · Published 2018-03-20 · Updated 2019-10-03 · CVE-2017-5736

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel Software Guard Extensions Platform Software Component versions prior to 1.9.105.42329

Description: The issue allows a local attacker to execute arbitrary code as administrator due to an elevation of privilege in the software component.

Recommendations: For versions prior to 1.9.105.42329, update to version 1.9.105.42329 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-5736

Affected Products

Intel Software Guard Extensions Platform Software

References · 4

• https://osv.dev/vulnerability/CVE-2017-5736 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5736 · Security Note
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00117&languageid=en-fr · Vendor Advisory
• http://securityfocus.com/bid/103482 · Note