301 matches found
VulnCheck KEV: CVE-2017-3198
GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected...
VulnCheck KEV: CVE-2017-3197
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 and GB-BXi7-5775 version F2 platforms does not securely implement BIOSWE, BLE, SMMBWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash...
GIGABYTE BRIX UEFI firmware fails to implement write protection and is not cryptographically signed
Overview GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 and GB-BXi7-5775 platforms, versions vF6 and vF2 respectively, fails to properly set the BIOSWE, BLE, SMMBWP, and PRx bits to enforce write protection. It also is not cryptographically signed. These issues may permit an attacker to write...
Scope of ThinkPwn UEFI Zero Day Expands
A serious hardware vulnerability, thought to be confined to UEFI drivers in Lenovo and HP laptops, has also been found in firmware running on motherboards sold by Gigabyte. The flaw was publicly disclosed last week by researcher Dmytro Oleksiuk. No patches are yet available. Oleksiuk said the fla...
Design/Logic Flaw
The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...
CVE-2010-1517
The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...
CVE-2010-1518
The CVE-2010-1518 issue affects GIGABYTE Dldrv2 ActiveX Control 1.4.206.11. A missing input validation of the item argument to SetDLInfo leads to array-indexing/overflow, causing memory corruption that enables remote code execution or denial of service. Affected component: Dldrv2 ActiveX Control;...
CVE-2010-1517
The CVE concerns the GIGABYTE Dldrv2 ActiveX control version 1.4.206.11. The vulnerability allows remote attackers to download arbitrary programs onto a client system and execute them via the dl method, and also via SetDLInfo with the Bdl method. The affected component is the Dldrv2 ActiveX contr...
CVE-2010-1517
The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to 1 download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and 2 download arbitrary programs onto a client system via vectors involving the SetDLInfo method in...
Secunia Research: GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability
====================================================================== Secunia Research 15/07/2010 - GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...
GIGABYTE Download Center ActiveX array index overflow
Array index overflow in SetDLInfo method of Dldrv2 ActiveX...
Backup implementation
Backup implementation I. Intro II. Tools III. Strategy Well, now let's talk about how to live with all this correctly. The backup process consists of three stages: planning, implementation and support. We have already talked a little about support and implementation, but planning is the most...
security flaw
A regression error in the restoreall code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterprise Linux 4 allows local users to cause a denial of service panic via unspecified vectors...
Talking about after the invasion of the hardware destruction method-vulnerability warning-the black bar safety net
| Internetthe field of security, one foot magic ridge, and then strong fortress also has his deadly colony, hackersarttoday, was born many kinds of means of attack, and in front of the defense method is endless, but whether it is anti-both, all overlooked an important aspect-that is, hardware...
security flaw
Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls...
security flaw
A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service crash...
CVE-2004-0328
Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system...
CVE-2004-0328
Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system...
CVE-2004-0328
CVE-2004-0328 affects Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00. The vulnerability lets local network users bypass authentication by using a copy of the router’s HTML menu on a separate system, effectively gaining unauthorized access. No further exploitation details are ...