7.2

CVE-2009-4419

Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.34
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf
http://osvdb.org/61248
http://secunia.com/advisories/37900
Vendor Advisory
http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021&languageid=en-fr
Vendor Advisory
http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html
http://www.securityfocus.com/bid/37430
http://www.securitytracker.com/id?1023382
http://www.vupen.com/english/advisories/2009/3618
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54963