HPSBHF03601 rev. 4 - Arbitrary Code Execution via Intel Smart Sound Technologies Driver

Potential Security Impact

Escalation of Privilege

Source: HP, HP Product Security Response Team (PSRT)

Reported by: Intel

VULNERABILITY SUMMARY

HP has been informed of potential security vulnerabilities in the Intel Smart Sound Technologies driver module prior to version 9.21.00.354.

These vulnerabilities potentially allow a local attacker to execute arbitrary code as administrator via a non-paged pool overflow, a buffer overflow, or a system call.

RESOLUTION

HP recommends keeping your system up to date with the latest firmware and drivers.