Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Security

December 7th, 2006, 08:12 GMT · By Bogdan Popa

Intel LAN Driver Vulnerability

SHARE:

Adjust text size:


Intel LAN Drivers are some of the most popular drivers on the Internet because many users acquired Intel hardware that must be installed using
these software solutions.

Because I'm sure you have at least one friend that uses an Intel LAN device, you should know that the company announced and also confirmed a vulnerability that was discovered in their drivers.

"A vulnerability exists in all PCI, PCI-X and PCIe Intel network adapter drivers that could allow unprivileged code executing on an affected system to perform a local privilege escalation. This vulnerability is due to a buffer overflow that could be caused by incorrect use of a function call. This condition could allow unauthorized code to be introduced that could be run with kernel-level privileges," Intel said.

Even if security company Secunia rated the flaw as "less critical", the firm added that "a vulnerability has been reported in Intel LAN drivers, which can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to an unspecified error and can be exploited to cause a buffer overflow by using certain function calls incorrectly. Successful exploitation allows execution of arbitrary code with kernel-level privileges."

Intel mentioned that the company is not aware of the malicious use of the vulnerability, but users should upgrade to the latest drivers by visiting the official page and find the latest version of the application.

The company also rated the severity rating as "important", adding that users that have an Intel network adapter should follow this link and determine the version of the installed driver.

You can also see all the affected versions of the drivers, the operating system and the correct version of the patch, in the image below:

TELL US WHAT YOU THINK:

1,491 hits · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


McAfee Prepares Internet Security System Switch Program

Adobe Reader and Acrobat Vulnerabilities

Symantec NetBackup PureDisk Security Flaw

W32.Spybot.ACYR Vulnerability Exploiter

F-Secure Releases Mobile Security Solution with Integrated Firewall for S60 3rd Edition Phones

READER COMMENTS:



No user comments yet.
Be the first to express your opinion!
Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM