Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/108767 | Broken Link Third Party Advisory VDB Entry |
| https://support.lenovo.com/us/en/product_security/LEN-27840 | Third Party Advisory |
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/108767 | Broken Link Third Party Advisory VDB Entry |
| https://support.lenovo.com/us/en/product_security/LEN-27840 | Third Party Advisory |
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html | Patch Vendor Advisory |
Configurations
History
21 Nov 2024, 04:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/108767 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () https://support.lenovo.com/us/en/product_security/LEN-27840 - Third Party Advisory | |
| References | () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html - Patch, Vendor Advisory |
03 Mar 2023, 19:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://support.lenovo.com/us/en/product_security/LEN-27840 - Third Party Advisory | |
| References | (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00224.html - Patch, Vendor Advisory | |
| References | (BID) http://www.securityfocus.com/bid/108767 - Broken Link, Third Party Advisory, VDB Entry |
Information
Published : 2019-06-13 16:29
Updated : 2024-11-21 04:16
NVD link : CVE-2019-0128
Mitre link : CVE-2019-0128
CVE.ORG link : CVE-2019-0128
JSON object : View
Products Affected
intel
- chipset_device_software
CWE
CWE-264
Permissions, Privileges, and Access Controls