The company confirmed the network connectivity flaw

Dec 7, 2006 08:12 GMT  ·  By

Intel LAN Drivers are some of the most popular drivers on the Internet because many users acquired Intel hardware that must be installed using these software solutions.

Because I'm sure you have at least one friend that uses an Intel LAN device, you should know that the company announced and also confirmed a vulnerability that was discovered in their drivers.

"A vulnerability exists in all PCI, PCI-X and PCIe Intel network adapter drivers that could allow unprivileged code executing on an affected system to perform a local privilege escalation. This vulnerability is due to a buffer overflow that could be caused by incorrect use of a function call. This condition could allow unauthorized code to be introduced that could be run with kernel-level privileges," Intel said.

Even if security company Secunia rated the flaw as "less critical", the firm added that "a vulnerability has been reported in Intel LAN drivers, which can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to an unspecified error and can be exploited to cause a buffer overflow by using certain function calls incorrectly. Successful exploitation allows execution of arbitrary code with kernel-level privileges."

Intel mentioned that the company is not aware of the malicious use of the vulnerability, but users should upgrade to the latest drivers by visiting the official page and find the latest version of the application.

The company also rated the severity rating as "important", adding that users that have an Intel network adapter should follow this link and determine the version of the installed driver.

You can also see all the affected versions of the drivers, the operating system and the correct version of the patch, in the image below:

Photo Gallery (2 Images)

Open gallery