Multiple Intel Desktop Board Models Bitmap Processing Buffer Overflow Vulnerability

Bugtraq ID:	36886
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 30 2009 12:00AM
Updated:	Nov 02 2009 09:17PM
Credit:	Alexander Tereshkin, Rafal Wojtczuk, and Joanna Rutkowska from Invisible Things Lab
Vulnerable:	Intel DQ45EK 0 Intel DQ45CB 0 Intel DQ35MP 0 Intel DQ35JO 0
Not Vulnerable:	Intel DQ45EK CBQ4510H.86A.0101.20 Intel DQ45CB CBQ4510H.86A.0101.20 Intel DQ35MP JOQ3510J.86A.1122.20 Intel DQ35JO JOQ3510J.86A.1122.20

Multiple Intel Desktop Board Models Bitmap Processing Buffer Overflow Vulnerability

Multiple Intel Desktop Board models are prone to a buffer-overflow vulnerability because they fail to properly bounds-check user-supplied data.

Successfully exploiting this issue will allow local attackers to run arbitrary code with elevated privileges or trigger a denial-of-service condition.

The following models are affected:

DQ35JO
DQ35MP
DQ45CB
DQ45EK

Multiple Intel Desktop Board Models Bitmap Processing Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Intel Desktop Board Models Bitmap Processing Buffer Overflow Vulnerability

Solution:
Intel has released updated BIOS versions. Please see the references for details.

Multiple Intel Desktop Board Models Bitmap Processing Buffer Overflow Vulnerability

References:

• Intel Homepage (Intel)
  
• Intel® Desktop Board Buffer Overflow Local Privilege Escalation (Intel)