Windows 10: Intel Puma Chipset Denial of Service Vulnerabilities

Source: INTEL-SA-00097

:)

 

Intel RST Services

Hi,

In a Windows computer, if a service is not running you can manually start a service. For us to assist you, we recommend that you follow the steps listed below to start the service:

• On the search field, type Services and then press Enter.
• Locate Intel Rapid storage technology service.
• Right click on Intel Rapid storage technology service and then press
  Start.

Let us know how it goes and if you need further assistance, feel free to post back.

 

Intel Readies P55 Chipset B3 Stepping Update

Intel's is readying a hardware update for its P55 Express chipset, currently the only core-logic for the company's brand new socket LGA-1156 processor platform. The new B3 stepping of the P55 PCH will bring with it a little more than new MM number and S-spec numbers. A list of changes is as follows:

• New MM number and S-spec numbers for the converted products;
• Firmware and minor BIOS updates are required with the conversion;
• Processor MRC/microcode update required to enable future processors;
• Recommended storage driver upgrade from Intel MSM 8.9 to Intel RST 9.5.

Although it is listed that the MRC update enables 'future processors', Intel, in a statement issued to X-bit labs assured that the current B2 stepping of the chipset (found on current socket LGA-1156 motherboards) does not leave out support for any of Intel's new LGA-1156 processors that are slated for release in the very near future. The dual-core "Clarkale" 32 nm processor will be supported by both B2 and B3 steppings of the chipset.

P55 B3 stepping is pin-identical to P55 B2, and hence motherboard vendors will not have to come up with new designs. Sampling of the new stepping began as early as on October 02, 2009, and it is scheduled for shipment to manufacturers by the 7th of December, 2009. P55 is the performance core-logic for the LGA-1156 platform. It supports Core i5 and Core i7 "Lynnfield" processors with discrete graphics.

Source: X-bit labs

 

Does NVIDIA Display Driver Service Make Your System Vulnerable?

So let me get this straight. For someone to exploit this vulnerability the following must be true:

• The attacker mush know the username and password of an active local user account on the machine.
• The firewall has to allow traffic in through whatever port the service is listening on.

You'd have to have a pretty shitty security setup already for this vulnerability to really affect you.