Intel Hardware Accelerated Execution Manager CVE-2017-5683 Local Privilege Escalation Vulnerability

Bugtraq ID:	98661
Class:	Design Error
CVE:	CVE-2017-5683
Remote:	No
Local:	Yes
Published:	Apr 04 2017 12:00AM
Updated:	Apr 04 2017 12:00AM
Credit:	Enrique Nissim
Vulnerable:	Intel Hardware Accelerated Execution Manager 6.0.4
Not Vulnerable:	Intel Hardware Accelerated Execution Manager 6.0.6

Intel Hardware Accelerated Execution Manager CVE-2017-5683 Local Privilege Escalation Vulnerability

Intel Hardware Accelerated Execution Manager is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to gain system level access.

Versions prior to Intel Hardware Accelerated Execution Manager 6.0.6 are vulnerable.

Intel Hardware Accelerated Execution Manager CVE-2017-5683 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Intel Hardware Accelerated Execution Manager CVE-2017-5683 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Intel Hardware Accelerated Execution Manager CVE-2017-5683 Local Privilege Escalation Vulnerability

References:

• Hardware Accelerated Execution Manager Product Homepage (Intel)
  
• Intel Homepage (Intel)
  
• Intel® Hardware Accelerated Execution Manager Driver Privilege Escalation Vulne (Intel)