High-Severity Flaws Plague Intel Graphics Drivers

🗓️ 10 Mar 2020 18:08:36Reported by Lindsey O'DonnellType

threatpost

threatpost🔗 threatpost.com👁 73 Views

Intel patches high-severity flaws in Windows graphics driver

Reporter	Title	Published	Views	Family All 150
ATTACKERKB	CVE-2020-0505	12 Mar 202018:15	–	attackerkb
ATTACKERKB	CVE-2020-0501	12 Mar 202018:15	–	attackerkb
ATTACKERKB	CVE-2020-0504	12 Mar 202018:15	–	attackerkb
BDU FSTEC	The vulnerability of the Intel Graphics Kernel Mode Driver lies in its insufficient input validation, which allows attackers to execute arbitrary code.	29 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Intel Graphics Kernel Mode Driver relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	29 Mar 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Graphics Driver drivers, related to access control deficiencies, allows attackers to trigger a service failure.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the built-in software of the Intel NUC Kit and Intel Compute Stick exists due to insufficient testing of input data, allowing attackers to exploit it to gain increased privileges.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Graphics Driver drivers arises from operations that go beyond buffer boundaries in memory, allowing attackers to escalate their privileges or cause system failures.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel Graphics Drivers relates to improper handling of access control. This allows attackers to escalate their privileges and cause service failures.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the igdkmd64.sys driver for Intel Graphics Drivers, related to an error in path traversal, allows attackers to escalate their privileges and cause service failures.	20 Mar 202000:00	–	bdu_fstec

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
lviattack	www.lviattack.eu/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
threatpost	www.threatpost.com/newsletter-sign/
cwe	www.cwe.mitre.org/data/definitions/122.html
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

10 Mar 2020 18:08Current

8.3High risk

Vulners AI Score8.3

EPSS0.0104

intel windows graphics drivers security patches high-severity vulnerabilities escalation of privilege denial of service information disclosure buffer-overflow vulnerability load value injection lvi vulnerability