Vulnerability-Lookup

BDU:2019-04867

Vulnerability from fstec - Published: 24.07.2018

Title

Уязвимость драйвера Intel Smart Sound Technology, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

Description

Уязвимость драйвера Intel Smart Sound Technology связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с повышенными привилегиями

Severity


                    
                      AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Vendor

Intel Corp., HP Inc.

Software Name

Intel Smart Sound Technology, HP Elite x2 1012 G2, HP Elite x2 1013 G3, HP EliteBook 1040 G4, HP EliteBook 820/828 G4, HP EliteBook 830 G5, HP Elite x2 1012 G1 Tablet, HP EliteBook 1030 G1 Notebook, HP EliteBook 820 G3 Notebook PC, HP EliteBook 840 G3 Notebook PC, HP EliteBook 840 G5, HP EliteBook 840 G5 HC Edition, HP EliteBook 840/848 G4, HP EliteBook 840r G4, HP EliteBook 850 G3 Notebook PC, HP EliteBook 850 G4, HP EliteBook 850 G5, HP EliteBook Folio 1040 G3 Notebook PC, HP EliteBook Folio G1 Notebook PC, HP EliteBook x360 1020 G2, HP EliteBook x360 1030 G2, HP EliteBook x360 1030 G3, HP Engage Go Mobile System, HP mt21 Mobile Thin Client, HP Pro x2 612 G2, HP Pro X2 612 G2 Retail Solution with Retail Case, HP ProBook 430 G3, HP ProBook 430 G4, HP ProBook 430 G5, HP ProBook 440 G3 Notebook PC, HP ProBook 440 G4, HP ProBook 440 G5, HP ProBook 450 G3 Notebook PC, HP ProBook 450 G4, HP ProBook 450 G5, HP ProBook 470 G3 Notebook PC, HP ProBook 470 G4, HP ProBook 470 G5, HP ProBook 640 G2 Notebook PC, HP ProBook 640 G3, HP ProBook 640 G4, HP ProBook 650 G2 Notebook PC, HP ProBook 650 G3, HP ProBook 650 G4, HP ProBook x360 440 G1, HP ZBook 14u G4, HP ZBook 14u G5, HP ZBook 15 G3 Mobile Workstation, HP ZBook 15 G4, HP ZBook 15u G3 Mobile Workstation, HP ZBook 15u G4, HP ZBook 15u G5, HP ZBook 17 G3 Mobile Workstation, HP ZBook 17 G4, HP ZBook Studio G3, HP ZBook Studio G4, HP ZBook x2 G4, HP ZHAN 66 Pro G1, HP ENVY 13-ad001 ~ 13-ad099, HP ENVY 13-ad100 ~ 13-ad199, HP ENVY 13-ah1000 ~ 13-ah1999, HP ENVY 17m-ae001 ~ 17m-ae099, HP ENVY 17m-ae100 ~ 17m-ae199, HP ENVY 17t-bw0000, HP ENVY x360 13-ab001 ~ 13-ab099, HP ENVY x360 13t-ab000 (CTO), HP ENVY x360 15-bp0xx (ROW), HP ENVY x360 15-bp1xx (ROW), HP ENVY x360 15m-bp1xx (BBY), HP ENVY x360 15m-cn0xxxx, HP ENVY x360 15m-cn1xxx, HP ENVY x360 m6-bp0xx (BBY), HP Pavilion 15-cs0000 ~ 15-cs0999, HP Pavilion 15-cu0000~15-cu0999, HP Spectre 13-ab000 ~ 13-ab099, HP Spectre 13-ae0xx, HP Spectre 13-af0xx, HP Spectre 13-af1xx, HP Spectre 15-bl000 ~ 15-bl099, HP Spectre 15-ch0xx, HP Spectre x2 12-c000~12c-c099, HP Spectre x360 13-w000 ~ 13-w099

Software Version

до 9.21.00.3541 (Intel Smart Sound Technology), до 10.0.3690.118.Q.50 (HP Elite x2 1012 G2), до 12.37.1.102.Q.5 (HP Elite x2 1013 G3), до 11.27.3690.134.Q.5 (HP EliteBook 1040 G4), до 11.27.3690.134.Q.5 (HP EliteBook 820/828 G4), до 12.37.1.102.Q.5 (HP EliteBook 830 G5), до 10.0.3690.118.Q.50 (HP Elite x2 1012 G1 Tablet), до 10.0.3690.118.Q.50 (HP EliteBook 1030 G1 Notebook), до 10.0.3690.118.Q.50 (HP EliteBook 820 G3 Notebook PC), до 10.0.3690.118.Q.50 (HP EliteBook 840 G3 Notebook PC), до 12.37.1.102.Q.5 (HP EliteBook 840 G5), до 12.37.1.102.Q.5 (HP EliteBook 840 G5 HC Edition), до 11.27.3690.134.Q.5 (HP EliteBook 840/848 G4), до 11.27.3690.134.Q.5 (HP EliteBook 840r G4), до 10.0.3690.118.Q.50 (HP EliteBook 850 G3 Notebook PC), до 11.27.3690.134.Q.5 (HP EliteBook 850 G4), до 12.37.1.102.Q.5 (HP EliteBook 850 G5), до 10.0.3690.118.Q.50 (HP EliteBook Folio 1040 G3 Notebook PC), до 10.0.3690.118.Q.50 (HP EliteBook Folio G1 Notebook PC), до 11.49.3690.124.Q.5 (HP EliteBook x360 1020 G2), до 11.27.3690.134.Q.5 (HP EliteBook x360 1030 G2), до 12.37.1.102.Q.5 (HP EliteBook x360 1030 G3), до 9.21.00.3690 (HP Engage Go Mobile System), до 9.0.216.0 (HP mt21 Mobile Thin Client), до 11.27.3690.134.Q.5 (HP Pro x2 612 G2), до 11.27.3690.134.Q.5 (HP Pro X2 612 G2 Retail Solution with Retail Case), до 10.0.3690.118.Q.50 (HP ProBook 430 G3), до 11.27.3690.134.Q.5 (HP ProBook 430 G4), до 12.37.1.102.Q.5 (HP ProBook 430 G5), до 10.0.3690.118.Q.50 (HP ProBook 440 G3 Notebook PC), до 11.27.3690.134.Q.5 (HP ProBook 440 G4), до 12.37.1.102.Q.5 (HP ProBook 440 G5), до 10.0.3690.118.Q.50 (HP ProBook 450 G3 Notebook PC), до 11.27.3690.134.Q.5 (HP ProBook 450 G4), до 12.37.1.102.Q.5 (HP ProBook 450 G5), до 10.0.3690.118.Q.50 (HP ProBook 470 G3 Notebook PC), до 11.27.3690.134.Q.5 (HP ProBook 470 G4), до 12.37.1.102.Q.5 (HP ProBook 470 G5), до 10.0.3690.118.Q.50 (HP ProBook 640 G2 Notebook PC), до 11.27.3690.134.Q.5 (HP ProBook 640 G3), до 12.37.1.102.Q.5 (HP ProBook 640 G4), до 10.0.3690.118.Q.50 (HP ProBook 650 G2 Notebook PC), до 11.27.3690.134.Q.5 (HP ProBook 650 G3), до 12.37.1.102.Q.5 (HP ProBook 650 G4), до 11.49.3690.124.Q.5 (HP ProBook x360 440 G1), до 11.27.3690.134.Q.5 (HP ZBook 14u G4), до 12.37.1.102.Q.5 (HP ZBook 14u G5), до 10.0.3690.118.Q.50 (HP ZBook 15 G3 Mobile Workstation), до 11.27.3690.134.Q.5 (HP ZBook 15 G4), до 10.0.3690.118.Q.50 (HP ZBook 15u G3 Mobile Workstation), до 11.27.3690.134.Q.5 (HP ZBook 15u G4), до 12.37.1.102.Q.5 (HP ZBook 15u G5), до 10.0.3690.118.Q.50 (HP ZBook 17 G3 Mobile Workstation), до 11.27.3690.134.Q.5 (HP ZBook 17 G4), до 10.0.3690.118.Q.50 (HP ZBook Studio G3), до 11.27.3690.134.Q.5 (HP ZBook Studio G4), до 11.27.3690.134.Q.5 (HP ZBook x2 G4), до 12.37.1.102.Q.5 (HP ZHAN 66 Pro G1), до 6.0.1.8569 (HP ENVY 13-ad001 ~ 13-ad099), до 6.0.1.8569 (HP ENVY 13-ad100 ~ 13-ad199), до 6.0.1.8544 (HP ENVY 13-ah1000 ~ 13-ah1999), до 6.0.1.8515 (HP ENVY 13-ah1000 ~ 13-ah1999), до 6.0.1.8569 (HP ENVY 17m-ae001 ~ 17m-ae099), до 6.0.1.8569 (HP ENVY 17m-ae100 ~ 17m-ae199), до 6.0.1.8509 (HP ENVY 17t-bw0000), до 6.0.1.8569 (HP ENVY x360 13-ab001 ~ 13-ab099), до 6.0.1.8569 (HP ENVY x360 13t-ab000 (CTO)), до 6.0.1.8393 (HP ENVY x360 15-bp0xx (ROW)), до 6.0.1.8393 (HP ENVY x360 15-bp1xx (ROW)), до 6.0.1.8393 (HP ENVY x360 15m-bp1xx (BBY)), до 6.0.1.8509 (HP ENVY x360 15m-cn0xxxx), до 6.0.1.8509 (HP ENVY x360 15m-cn1xxx), до 6.0.1.8393 (HP ENVY x360 m6-bp0xx (BBY)), до 6.0.1.8515 (HP Pavilion 15-cs0000 ~ 15-cs0999), до 6.0.1.8515 (HP Pavilion 15-cu0000~15-cu0999), до 6.0.1.8536 (HP Spectre 13-ab000 ~ 13-ab099), до 6.0.1.8536 (HP Spectre 13-ae0xx), до 6.0.1.8510 (HP Spectre 13-af0xx), до 6.0.1.8510 (HP Spectre 13-af1xx), до 6.0.1.8536 (HP Spectre 15-bl000 ~ 15-bl099), до 6.0.1.8536 (HP Spectre 15-ch0xx), до 6.0.1.8544 (HP Spectre x2 12-c000~12c-c099), до 6.0.1.8536 (HP Spectre x360 13-w000 ~ 13-w099)

Possible Mitigations

Использование рекомендаций: Для программных продуктов Hewlett-Packard Development Company L.P.: https://support.hp.com/us-en/document/c06217358 Для программных продуктов Intel Corp.: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00163.html

Reference

https://support.hp.com/us-en/document/c06217358 https://nvd.nist.gov/vuln/detail/CVE-2018-3672 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00163.html

CWE

CWE-119

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Intel Corp., HP Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 9.21.00.3541 (Intel Smart Sound Technology), \u0434\u043e 10.0.3690.118.Q.50 (HP Elite x2 1012 G2), \u0434\u043e 12.37.1.102.Q.5 (HP Elite x2 1013 G3), \u0434\u043e 11.27.3690.134.Q.5 (HP EliteBook 1040 G4), \u0434\u043e 11.27.3690.134.Q.5 (HP EliteBook 820/828 G4), \u0434\u043e 12.37.1.102.Q.5 (HP EliteBook 830 G5), \u0434\u043e 10.0.3690.118.Q.50 (HP Elite x2 1012 G1 Tablet), \u0434\u043e 10.0.3690.118.Q.50 (HP EliteBook 1030 G1 Notebook), \u0434\u043e 10.0.3690.118.Q.50 (HP EliteBook 820 G3 Notebook PC), \u0434\u043e 10.0.3690.118.Q.50 (HP EliteBook 840 G3 Notebook PC), \u0434\u043e 12.37.1.102.Q.5 (HP EliteBook 840 G5), \u0434\u043e 12.37.1.102.Q.5 (HP EliteBook 840 G5 HC Edition), \u0434\u043e 11.27.3690.134.Q.5 (HP EliteBook 840/848 G4), \u0434\u043e 11.27.3690.134.Q.5 (HP EliteBook 840r G4), \u0434\u043e 10.0.3690.118.Q.50 (HP EliteBook 850 G3 Notebook PC), \u0434\u043e 11.27.3690.134.Q.5 (HP EliteBook 850 G4), \u0434\u043e 12.37.1.102.Q.5 (HP EliteBook 850 G5), \u0434\u043e 10.0.3690.118.Q.50 (HP EliteBook Folio 1040 G3 Notebook PC), \u0434\u043e 10.0.3690.118.Q.50 (HP EliteBook Folio G1 Notebook PC), \u0434\u043e 11.49.3690.124.Q.5 (HP EliteBook x360 1020 G2), \u0434\u043e 11.27.3690.134.Q.5 (HP EliteBook x360 1030 G2), \u0434\u043e 12.37.1.102.Q.5 (HP EliteBook x360 1030 G3), \u0434\u043e 9.21.00.3690 (HP Engage Go Mobile System), \u0434\u043e 9.0.216.0 (HP mt21 Mobile Thin Client), \u0434\u043e 11.27.3690.134.Q.5 (HP Pro x2 612 G2), \u0434\u043e 11.27.3690.134.Q.5 (HP Pro X2 612 G2 Retail Solution with Retail Case), \u0434\u043e 10.0.3690.118.Q.50 (HP ProBook 430 G3), \u0434\u043e 11.27.3690.134.Q.5 (HP ProBook 430 G4), \u0434\u043e 12.37.1.102.Q.5 (HP ProBook 430 G5), \u0434\u043e 10.0.3690.118.Q.50 (HP ProBook 440 G3 Notebook PC), \u0434\u043e 11.27.3690.134.Q.5 (HP ProBook 440 G4), \u0434\u043e 12.37.1.102.Q.5 (HP ProBook 440 G5), \u0434\u043e 10.0.3690.118.Q.50 (HP ProBook 450 G3 Notebook PC), \u0434\u043e 11.27.3690.134.Q.5 (HP ProBook 450 G4), \u0434\u043e 12.37.1.102.Q.5 (HP ProBook 450 G5), \u0434\u043e 10.0.3690.118.Q.50 (HP ProBook 470 G3 Notebook PC), \u0434\u043e 11.27.3690.134.Q.5 (HP ProBook 470 G4), \u0434\u043e 12.37.1.102.Q.5 (HP ProBook 470 G5), \u0434\u043e 10.0.3690.118.Q.50 (HP ProBook 640 G2 Notebook PC), \u0434\u043e 11.27.3690.134.Q.5 (HP ProBook 640 G3), \u0434\u043e 12.37.1.102.Q.5 (HP ProBook 640 G4), \u0434\u043e 10.0.3690.118.Q.50 (HP ProBook 650 G2 Notebook PC), \u0434\u043e 11.27.3690.134.Q.5 (HP ProBook 650 G3), \u0434\u043e 12.37.1.102.Q.5 (HP ProBook 650 G4), \u0434\u043e 11.49.3690.124.Q.5 (HP ProBook x360 440 G1), \u0434\u043e 11.27.3690.134.Q.5 (HP ZBook 14u G4), \u0434\u043e 12.37.1.102.Q.5 (HP ZBook 14u G5), \u0434\u043e 10.0.3690.118.Q.50 (HP ZBook 15 G3 Mobile Workstation), \u0434\u043e 11.27.3690.134.Q.5 (HP ZBook 15 G4), \u0434\u043e 10.0.3690.118.Q.50 (HP ZBook 15u G3 Mobile Workstation), \u0434\u043e 11.27.3690.134.Q.5 (HP ZBook 15u G4), \u0434\u043e 12.37.1.102.Q.5 (HP ZBook 15u G5), \u0434\u043e 10.0.3690.118.Q.50 (HP ZBook 17 G3 Mobile Workstation), \u0434\u043e 11.27.3690.134.Q.5 (HP ZBook 17 G4), \u0434\u043e 10.0.3690.118.Q.50 (HP ZBook Studio G3), \u0434\u043e 11.27.3690.134.Q.5 (HP ZBook Studio G4), \u0434\u043e 11.27.3690.134.Q.5 (HP ZBook x2 G4), \u0434\u043e 12.37.1.102.Q.5 (HP ZHAN 66 Pro G1), \u0434\u043e 6.0.1.8569 (HP ENVY 13-ad001 ~ 13-ad099), \u0434\u043e 6.0.1.8569 (HP ENVY 13-ad100 ~ 13-ad199), \u0434\u043e 6.0.1.8544 (HP ENVY 13-ah1000 ~ 13-ah1999), \u0434\u043e 6.0.1.8515 (HP ENVY 13-ah1000 ~ 13-ah1999), \u0434\u043e 6.0.1.8569 (HP ENVY 17m-ae001 ~ 17m-ae099), \u0434\u043e 6.0.1.8569 (HP ENVY 17m-ae100 ~ 17m-ae199), \u0434\u043e 6.0.1.8509 (HP ENVY 17t-bw0000), \u0434\u043e 6.0.1.8569 (HP ENVY x360 13-ab001 ~ 13-ab099), \u0434\u043e 6.0.1.8569 (HP ENVY x360 13t-ab000 (CTO)), \u0434\u043e 6.0.1.8393 (HP ENVY x360 15-bp0xx (ROW)), \u0434\u043e 6.0.1.8393 (HP ENVY x360 15-bp1xx (ROW)), \u0434\u043e 6.0.1.8393 (HP ENVY x360 15m-bp1xx (BBY)), \u0434\u043e 6.0.1.8509 (HP ENVY x360 15m-cn0xxxx), \u0434\u043e 6.0.1.8509 (HP ENVY x360 15m-cn1xxx), \u0434\u043e 6.0.1.8393 (HP ENVY x360 m6-bp0xx (BBY)), \u0434\u043e 6.0.1.8515 (HP Pavilion 15-cs0000 ~ 15-cs0999), \u0434\u043e 6.0.1.8515 (HP Pavilion 15-cu0000~15-cu0999), \u0434\u043e 6.0.1.8536 (HP Spectre 13-ab000 ~ 13-ab099), \u0434\u043e 6.0.1.8536 (HP Spectre 13-ae0xx), \u0434\u043e 6.0.1.8510 (HP Spectre 13-af0xx), \u0434\u043e 6.0.1.8510 (HP Spectre 13-af1xx), \u0434\u043e 6.0.1.8536 (HP Spectre 15-bl000 ~ 15-bl099), \u0434\u043e 6.0.1.8536 (HP Spectre 15-ch0xx), \u0434\u043e 6.0.1.8544 (HP Spectre x2 12-c000~12c-c099), \u0434\u043e 6.0.1.8536 (HP Spectre x360 13-w000 ~ 13-w099)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Hewlett-Packard Development Company L.P.:\nhttps://support.hp.com/us-en/document/c06217358\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Intel Corp.:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00163.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.07.2018",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "26.12.2019",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "26.12.2019",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2019-04867",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2018-3672",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Intel Smart Sound Technology, HP Elite x2 1012 G2, HP Elite x2 1013 G3, HP EliteBook 1040 G4, HP EliteBook 820/828 G4, HP EliteBook 830 G5, HP Elite x2 1012 G1 Tablet, HP EliteBook 1030 G1 Notebook, HP EliteBook 820 G3 Notebook PC, HP EliteBook 840 G3 Notebook PC, HP EliteBook 840 G5, HP EliteBook 840 G5 HC Edition, HP EliteBook 840/848 G4, HP EliteBook 840r G4, HP EliteBook 850 G3 Notebook PC, HP EliteBook 850 G4, HP EliteBook 850 G5, HP EliteBook Folio 1040 G3 Notebook PC, HP EliteBook Folio G1 Notebook PC, HP EliteBook x360 1020 G2, HP EliteBook x360 1030 G2, HP EliteBook x360 1030 G3, HP Engage Go Mobile System, HP mt21 Mobile Thin Client, HP Pro x2 612 G2, HP Pro X2 612 G2 Retail Solution with Retail Case, HP ProBook 430 G3, HP ProBook 430 G4, HP ProBook 430 G5, HP ProBook 440 G3 Notebook PC, HP ProBook 440 G4, HP ProBook 440 G5, HP ProBook 450 G3 Notebook PC, HP ProBook 450 G4, HP ProBook 450 G5, HP ProBook 470 G3 Notebook PC, HP ProBook 470 G4, HP ProBook 470 G5, HP ProBook 640 G2 Notebook PC, HP ProBook 640 G3, HP ProBook 640 G4, HP ProBook 650 G2 Notebook PC, HP ProBook 650 G3, HP ProBook 650 G4, HP ProBook x360 440 G1, HP ZBook 14u G4, HP ZBook 14u G5, HP ZBook 15 G3 Mobile Workstation, HP ZBook 15 G4, HP ZBook 15u G3 Mobile Workstation, HP ZBook 15u G4, HP ZBook 15u G5, HP ZBook 17 G3 Mobile Workstation, HP ZBook 17 G4, HP ZBook Studio G3, HP ZBook Studio G4, HP ZBook x2 G4, HP ZHAN 66 Pro G1, HP ENVY 13-ad001 ~ 13-ad099, HP ENVY 13-ad100 ~ 13-ad199, HP ENVY 13-ah1000 ~ 13-ah1999, HP ENVY 17m-ae001 ~ 17m-ae099, HP ENVY 17m-ae100 ~ 17m-ae199, HP ENVY 17t-bw0000, HP ENVY x360 13-ab001 ~ 13-ab099, HP ENVY x360 13t-ab000 (CTO), HP ENVY x360 15-bp0xx (ROW), HP ENVY x360 15-bp1xx (ROW), HP ENVY x360 15m-bp1xx (BBY), HP ENVY x360 15m-cn0xxxx, HP ENVY x360 15m-cn1xxx, HP ENVY x360 m6-bp0xx (BBY), HP Pavilion 15-cs0000 ~ 15-cs0999, HP Pavilion 15-cu0000~15-cu0999, HP Spectre 13-ab000 ~ 13-ab099, HP Spectre 13-ae0xx, HP Spectre 13-af0xx, HP Spectre 13-af1xx, HP Spectre 15-bl000 ~ 15-bl099, HP Spectre 15-ch0xx, HP Spectre x2 12-c000~12c-c099, HP Spectre x360 13-w000 ~ 13-w099",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Intel Smart Sound Technology, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Intel Smart Sound Technology \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.hp.com/us-en/document/c06217358\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-3672\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00163.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,7)"
}

CVE-2018-3672 (GCVE-0-2018-3672)

Vulnerability from cvelistv5 – Published: 2018-08-01 15:00 – Updated: 2024-09-17 01:01

Summary

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls.

Severity

No CVSS data available.

CWE

Privilege Escalation

Assigner

intel

References

1 reference

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Intel Corporation	Smart Sound Technology	Affected: before 9.21.00.3541

Date Public

2018-07-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T04:50:30.418Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00163.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Smart Sound Technology",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "before 9.21.00.3541"
            }
          ]
        }
      ],
      "datePublic": "2018-07-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Privilege Escalation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-08-01T14:57:01.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00163.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "DATE_PUBLIC": "2018-07-24T00:00:00",
          "ID": "CVE-2018-3672",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Smart Sound Technology",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 9.21.00.3541"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Privilege Escalation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00163.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00163.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2018-3672",
    "datePublished": "2018-08-01T15:00:00.000Z",
    "dateReserved": "2017-12-28T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:01:35.495Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

BDU:2019-04867

CVE-2018-3672 (GCVE-0-2018-3672)

Tags

Sightings

Nomenclature