Intel Smart Sound Tech Vulnerable to Three High-Severity Bugs

guest · Jul 25, 2018

Intel Smart Sound Tech Vulnerable to Three High-Severity Bugs
Intel patches three flaws that could allow a local attacker to execute arbitrary code on impacted systems.
July 25, 2018
https://threatpost.com/intel-smart-sound-tech-vulnerable-to-three-high-severity-bugs/134395/

The vulnerabilities are tied to versions of its own Intel Smart Sound Technology, used to boost audio processing for tasks such as voice commands and interactions with Cortana, Nuance Dragon and Skype.

In an advisory (INTEL-SA-00163) issued Wednesday the chipmaker rated the severity of the issue as “Important.” Based on MITRE’s CVSS v3.0 ratings system, each of the three vulnerabilities are rated “high” or 7.5.

One of the vulnerabilities (CVE-2018-3666) is traced back to a driver module used in Intel’s Smart Sound Technology (before version 9.21.00.3541) that could potentially allow a local attacker to execute arbitrary code as administrator via a non-paged pool overflow.
[...] Intel also patched a driver module vulnerability (CVE-2018-3670) [...] A third vulnerability (CVE-2018-3672) was also identified
Click to expand...

Log in or Sign up

Intel Smart Sound Tech Vulnerable to Three High-Severity Bugs

guest Guest

Log in or Sign up

Intel Smart Sound Tech Vulnerable to Three High-Severity Bugs

guest Guest

Useful Searches