Intel Patches Security Flaws in Processor Diagnostic Tool

guest · Jul 9, 2018

Intel Patches Security Flaws in Processor Diagnostic Tool
Intel has updated its Processor Diagnostic Tool to address vulnerabilities that could lead to arbitrary code execution and escalation of privileges.
July 9, 2018
https://www.securityweek.com/intel-patches-security-flaws-processor-diagnostic-tool

The recently addressed vulnerabilities (two of which are tracked as CVE-2018-3667 and CVE-2018-3668) were found by Stephan Kanthak and affect the IPDT releases up to v4.1.0.24, Intel reveals.

The security flaws can be exploited in standard Windows installations where a user UAC-protected administrator account that is created during Windows setup is used, without elevation.

The issue is that the IPDT installer creates three files with improper permissions, thus opening the door to said vulnerabilities.
The researcher also discovered that the two setup executables also load multiple Windows system DLLs from their "application directory" in the %TEMP% folder, instead of using those in Windows' "system directory."
Click to expand...

Log in or Sign up

Intel Patches Security Flaws in Processor Diagnostic Tool

guest Guest

Log in or Sign up

Intel Patches Security Flaws in Processor Diagnostic Tool

guest Guest

Useful Searches