CVE-2017-5696

Published: Jan 18, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access.

Affected (13)

Products: Intel: Graphics Driver

1 product

Graphics Driver

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Intel Graphics Driver	version < 21.20.16.4860
Intel Graphics Driver	Version 15.40.1.64.4256
Intel Graphics Driver	Version 15.40.14.4352
Intel Graphics Driver	Version 15.40.26.4474
Intel Graphics Driver	Version 15.40.34.4624
Intel Graphics Driver	Version 15.40.36.4703
Intel Graphics Driver	Version 15.40.37.4835
Intel Graphics Driver	Version 15.40.4.64.4256
Intel Graphics Driver	Version 15.40.7.64.4279
Intel Graphics Driver	Version 15.45.18.4664
Intel Graphics Driver	Version 15.45.19.4678
Intel Graphics Driver	Version 15.45.21.4821
Intel Graphics Driver	Version 15.45.23.4860

Related CWEs

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (2)

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00080&languageid=en-fr

Source: secure@intel.com

Vendor Advisory

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00080&languageid=en-fr

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.