Search
Find a vulnerability
Search criteria
2 vulnerabilities found for q35_chipset by intel
CVE-2009-4419 (GCVE-0-2009-4419)
Vulnerability from nvd – Published: 2009-12-24 17:00 – Updated: 2024-08-07 07:01
VLAI
EPSS
VEX
Summary
Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://security-center.intel.com/advisory.aspx?in… | x_refsource_CONFIRM |
| http://www.securitytracker.com/id?1023382 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/37430 | vdb-entryx_refsource_BID |
| http://osvdb.org/61248 | vdb-entryx_refsource_OSVDB |
| http://invisiblethingslab.com/resources/misc09/An… | x_refsource_MISC |
| http://www.vupen.com/english/advisories/2009/3618 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/37900 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://theinvisiblethings.blogspot.com/2009/12/an… | x_refsource_MISC |
Date Public
2009-12-21 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T07:01:20.415Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021\u0026languageid=en-fr"
},
{
"name": "1023382",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1023382"
},
{
"name": "37430",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/37430"
},
{
"name": "61248",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/61248"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf"
},
{
"name": "ADV-2009-3618",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/3618"
},
{
"name": "37900",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/37900"
},
{
"name": "intel-chipset-sinit-priv-escalation(54963)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54963"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-12-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021\u0026languageid=en-fr"
},
{
"name": "1023382",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1023382"
},
{
"name": "37430",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/37430"
},
{
"name": "61248",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/61248"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf"
},
{
"name": "ADV-2009-3618",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/3618"
},
{
"name": "37900",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/37900"
},
{
"name": "intel-chipset-sinit-priv-escalation(54963)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54963"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-4419",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021\u0026languageid=en-fr",
"refsource": "CONFIRM",
"url": "http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021\u0026languageid=en-fr"
},
{
"name": "1023382",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1023382"
},
{
"name": "37430",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/37430"
},
{
"name": "61248",
"refsource": "OSVDB",
"url": "http://osvdb.org/61248"
},
{
"name": "http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf",
"refsource": "MISC",
"url": "http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf"
},
{
"name": "ADV-2009-3618",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/3618"
},
{
"name": "37900",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/37900"
},
{
"name": "intel-chipset-sinit-priv-escalation(54963)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54963"
},
{
"name": "http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html",
"refsource": "MISC",
"url": "http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-4419",
"datePublished": "2009-12-24T17:00:00.000Z",
"dateReserved": "2009-12-24T00:00:00.000Z",
"dateUpdated": "2024-08-07T07:01:20.415Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-4419 (GCVE-0-2009-4419)
Vulnerability from cvelistv5 – Published: 2009-12-24 17:00 – Updated: 2024-08-07 07:01
VLAI
EPSS
VEX
Summary
Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://security-center.intel.com/advisory.aspx?in… | x_refsource_CONFIRM |
| http://www.securitytracker.com/id?1023382 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/37430 | vdb-entryx_refsource_BID |
| http://osvdb.org/61248 | vdb-entryx_refsource_OSVDB |
| http://invisiblethingslab.com/resources/misc09/An… | x_refsource_MISC |
| http://www.vupen.com/english/advisories/2009/3618 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/37900 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://theinvisiblethings.blogspot.com/2009/12/an… | x_refsource_MISC |
Date Public
2009-12-21 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T07:01:20.415Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021\u0026languageid=en-fr"
},
{
"name": "1023382",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1023382"
},
{
"name": "37430",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/37430"
},
{
"name": "61248",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/61248"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf"
},
{
"name": "ADV-2009-3618",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/3618"
},
{
"name": "37900",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/37900"
},
{
"name": "intel-chipset-sinit-priv-escalation(54963)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54963"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-12-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021\u0026languageid=en-fr"
},
{
"name": "1023382",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1023382"
},
{
"name": "37430",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/37430"
},
{
"name": "61248",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/61248"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf"
},
{
"name": "ADV-2009-3618",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/3618"
},
{
"name": "37900",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/37900"
},
{
"name": "intel-chipset-sinit-priv-escalation(54963)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54963"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-4419",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021\u0026languageid=en-fr",
"refsource": "CONFIRM",
"url": "http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021\u0026languageid=en-fr"
},
{
"name": "1023382",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1023382"
},
{
"name": "37430",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/37430"
},
{
"name": "61248",
"refsource": "OSVDB",
"url": "http://osvdb.org/61248"
},
{
"name": "http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf",
"refsource": "MISC",
"url": "http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf"
},
{
"name": "ADV-2009-3618",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/3618"
},
{
"name": "37900",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/37900"
},
{
"name": "intel-chipset-sinit-priv-escalation(54963)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54963"
},
{
"name": "http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html",
"refsource": "MISC",
"url": "http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-4419",
"datePublished": "2009-12-24T17:00:00.000Z",
"dateReserved": "2009-12-24T00:00:00.000Z",
"dateUpdated": "2024-08-07T07:01:20.415Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}