Intel PRO/Wireless 2100 Network Connection Driver Local Privilege Escalation Vulnerability

Bugtraq ID:	19299
Class:	Boundary Condition Error
CVE:	CVE-2006-4022
Remote:	No
Local:	Yes
Published:	Aug 02 2006 12:00AM
Updated:	Jul 05 2016 09:23PM
Credit:	Reported by the vendor.
Vulnerable:	Intel PRO/Wireless 2100 7
Not Vulnerable:	Intel PRO/Wireless 2100 7.1.4.6 driver 1.2.4

Intel PRO/Wireless 2100 Network Connection Driver Local Privilege Escalation Vulnerability

Intel PRO/Wireless 2100 Network Connection driver is prone to a local privilege-escalation vulnerability.

A local attacker may trigger this issue to corrupt memory and execute code with kernel-level privileges.

A successful attack can allow the attacker to gain elevated privileges and completely compromise a vulnerable computer.

Intel PRO/Wireless 2100 versions prior to 7.1.4.6 with driver version 1.2.4.37 for Windows are vulnerable.

Intel PRO/Wireless 2100 Network Connection Driver Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Intel PRO/Wireless 2100 Network Connection Driver Local Privilege Escalation Vulnerability

Solution:
Intel has released PRO/Wireless 2100 version 7.1.4.6 with driver 1.2.4.37 to address this issue.


Intel PRO/Wireless 2100 7

• Intel Intel PRO/Wireless 2100 version 7.1.4.6 with driver 1.2.4.37
  http://support.intel.com/support/wireless/wlan/sb/cs-010623.htm

Intel PRO/Wireless 2100 Network Connection Driver Local Privilege Escalation Vulnerability

References:

• Intel Centrino Wireless Driver Malformed Frame Privilege Escalation (Intel)
  
• Intel PRO/Wireless Network Connection Product Page (Intel)