Realtek HD Audio Codec Drivers for Windows Vista Multiple Local Privilege Escalation Vulnerabilities
BID:28909
Info
Realtek HD Audio Codec Drivers for Windows Vista Multiple Local Privilege Escalation Vulnerabilities
| Bugtraq ID: | 28909 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-1932 CVE-2008-1931 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 23 2008 12:00AM |
| Updated: | Jul 06 2016 01:34PM |
| Credit: | Ruben Santamarta from Wintercore |
| Vulnerable: |
Realtek Semiconductor Corp. HD Audio Codec Driver R1.90 |
| Not Vulnerable: |
Realtek Semiconductor Corp. HD Audio Codec Driver R1.91 |
Discussion
Realtek HD Audio Codec Drivers for Windows Vista Multiple Local Privilege Escalation Vulnerabilities
Realtek HD Audio Codec Drivers for Windows Vista are prone to multiple local privilege-escalation vulnerabilities.
An attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. A successful exploit will result in the complete compromise of affected computers. Failed exploit attempts will cause a denial-of-service condition.
These issues affect both the 32-bit and 64-bit implementations of the HD Audio Codec Drivers for Windows Vista prior to R1.91. Specifically, the following files are vulnerable:
- RTKVHDA.sys prior to 6.0.1.5605 (32-bit)
- RTKVHDA64.sys prior to 6.0.1.5605 (64-bit)
Realtek HD Audio Codec Drivers for Windows Vista are prone to multiple local privilege-escalation vulnerabilities.
An attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. A successful exploit will result in the complete compromise of affected computers. Failed exploit attempts will cause a denial-of-service condition.
These issues affect both the 32-bit and 64-bit implementations of the HD Audio Codec Drivers for Windows Vista prior to R1.91. Specifically, the following files are vulnerable:
- RTKVHDA.sys prior to 6.0.1.5605 (32-bit)
- RTKVHDA64.sys prior to 6.0.1.5605 (64-bit)
Exploit / POC
Realtek HD Audio Codec Drivers for Windows Vista Multiple Local Privilege Escalation Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Realtek HD Audio Codec Drivers for Windows Vista Multiple Local Privilege Escalation Vulnerabilities
Solution:
The vendor released R1.91 of the driver to address these issues. Please see the references for more information.
Solution:
The vendor released R1.91 of the driver to address these issues. Please see the references for more information.
References
Realtek HD Audio Codec Drivers for Windows Vista Multiple Local Privilege Escalation Vulnerabilities
References:
References:
- Advisory W01-0408: RealTek HD Audio Codec Driver Local Privilege Escalation (Wintercore)
- High Definition Audio Codecs (Realtek Semiconductor Corp.)
- Vendor Homepage (Realtek Semiconductor Corp.)
- [W01-0408] Realtek HD Audio Codec Drivers (Vista) - Local Privilege Escalation ([email protected])