Windows 10: Intel System Support Utility for Windows Advisory - Jan. 8

Brink · Jan 10, 2019

Intel ID: INTEL-SA-00212 Advisory Category: Software Impact of vulnerability: Escalation of Privilege Severity rating: HIGH Original release: 01/08/2019 Last revised: 01/08/2019
Summary:

A potential security vulnerability in Intel® System Support Utility for Windows may allow an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2019-0088

Description: Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially enable an escalation of privilege via local access.

CVSS Base Score: 7.5 High

CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected Products:

Intel® System Support Utility for Windows before 2.5.0.15.

Recommendations:

Intel recommends that users of Intel® System Support Utility for Windows update to 2.5.0.15 or later.

Updates are available for download at this location:

https://downloadcenter.intel.com/dow...y-for-Windows-

Acknowledgements:

Intel would like to thank Alec Blance for reporting this issue and working with us on coordinated disclosure.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are deployed.

Revision History

Revision Date Description 1.0 01/08/2019 Initial Release
Click to expand...

Source: INTEL-SA-00212

:)

Brink · Jan 10, 2019

Intel System Defense Utility Vulnerability Advisory

[table][tr]Intel ID: INTEL-SA-00209 [/tr] [tr][td]Advisory Category:[/td] [td]Software[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Escalation of Privilege[/td] [/tr] [tr][td]Severity rating:[/td] [td]MEDIUM[/td] [/tr] [tr][td]Original release:[/td] [td]12/11/2018[/td] [/tr] [tr][td]Last revised:[/td] [td]12/11/2018[/td] [/tr] [/table]

Summary:

A potential security vulnerability in the Intel® System Defense Utility (all versions) may allow for an escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation notice for the System Defense Utility.

Vulnerability Details:

CVEID: CVE-2018-3705

Description: Improper directory permissions in the installer for the Intel(R) System Defense Utility may allow authenticated users to potentially enable an escalation of privilege via local access.

CVSS Base Score: 4.6 Medium

CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:L

Affected Products:

Intel® System Defense Utility all versions

Recommendations:

Intel has issued a Product Discontinuation notice for Intel® System Defense Utility and recommends that users of the Intel® System Defense Utility uninstall it or discontinue use at their earliest convenience.

Acknowledgements:

Intel would like to thank SaifAllah benMassaoud for reporting this issue and working with us on coordinated disclosure.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are deployed.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]12/11/2018[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00209

Monk.e83 · Jan 10, 2019

Unlocked Realtek HD Audio Drivers Windows 7 & 8 (With Dolby Digital Live and DTS Interactive)

Wait, but have you done the whole step-by-step guide described in the OP? DDL/DTS isn't supported natively by Windows 8/8.1 either, unless if you do the steps listed there.
Click to expand...

DTS supported natively by Windows 8/8.1 and it should work on windows 10 too just DDL require to unlock your driver .

Brink · Jan 10, 2019

Intel Extreme Tuning Utility Advisory

[table][tr]Intel ID: INTEL-SA-00162 [/tr] [tr][td]Advisory Category:[/td] [td]Software[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Escalation of Privilege, Denial of Service[/td] [/tr] [tr][td]Severity rating:[/td] [td]HIGH[/td] [/tr] [tr][td]Original release:[/td] [td]09/11/2018[/td] [/tr] [tr][td]Last revised:[/td] [td]09/11/2018[/td] [/tr] [/table]

Summary:

Potential security vulnerabilities in Intel® Extreme Tuning Utility may allow privilege escalation or information disclosure. Intel is releasing Intel® Extreme Tuning Utility updates to mitigate these potential vulnerabilities.

Vulnerability Details

CVEID: CVE-2018-12150
Description: Escalation of privilege in Installer for Intel(r) Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local access.
CVSS Base Score: 8.3 High
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CVEID: CVE-2018-12149
Description: Buffer overflow in input handling in Intel(r) Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the application via local access.
CVSS Base Score: 8.3 High
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CVE ID: CVE-2018-12151
Description: Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentially leading to a denial of service via local access.
CVSS Base Score: 3.3 Low
CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected Products:

Intel® Extreme Tuning Utility before 6.4.1.23.

Recommendations:

Intel recommends that users of Intel® Extreme Tuning Utility update to 6.4.1.23 or later.

Updates are available for download at this location:

https://downloadcenter.intel.com/dow...ity-Intel-XTU-

Acknowledgements:

Intel would like to thank Stefan Kanthak (CVE-2018-12150), SaifAllah benMassaoud (CVE-2018-12151) and Vyacheslav Rusakov (CVE-2018-12149) for reporting and working with us on coordinated disclosure.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]09/11/2018[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00162

Windows 10: Intel System Support Utility for Windows Advisory - Jan. 8

Intel System Support Utility for Windows Advisory - Jan. 8

Intel System Support Utility for Windows Advisory - Jan. 8

Intel System Support Utility for Windows Advisory - Jan. 8

Intel System Support Utility for Windows Advisory - Jan. 8 - Similar Threads - Intel System Support

Intel Processor Identification Utility for Windows Advisory

Intel Driver and Support Assistant Vulnerability Advisory

Intel SSD Data Center Tool Vulnerability Advisory - Jan. 8

Intel SGX Platform Software and Intel SGX SDK Advisory - Jan. 8

Intel PROSet/Wireless WiFi Software Advisory - Jan. 8

Intel Optane SSD DC P4800X Advisory - Jan. 8

Intel NUC Firmware Security Advisory - Jan. 8

Intel System Defense Utility Vulnerability Advisory

Intel Extreme Tuning Utility Advisory