Intel® PROSet/Wireless Software Local Information Disclosure

Summary:

A security vulnerability exists in the Intel® PROSet/Wireless Software (PROSet application) because of insecure usage of shared memory allowing a person having access to the user’s computer or malicious software installed on the user’s computer to obtain access to users’ wireless network security information.

Description:

A security vulnerability has been identified in Intel® PROSet/Wireless Software 7.x, 8.x, 9.x, and 10.x (PROSet application), which could be locally exploited by malicious users or software to obtain Wireless network security information such as WLAN pre-shared WEP key (all PROSet versions) and user authentication credentials (only PROSet 9.x and 10.x versions). This flaw is due to insecure usage of the shared memory.

Affected products: