CVE - CVE-2009-4419

CVE-ID
CVE-2009-4419	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:37430 URL:http://www.securityfocus.com/bid/37430 CONFIRM:http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021&languageid=en-fr MISC:http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf MISC:http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html OSVDB:61248 URL:~~http://osvdb.org/61248~~ (Obsolete source) SECTRACK:1023382 URL:http://www.securitytracker.com/id?1023382 SECUNIA:37900 URL:http://secunia.com/advisories/37900 VUPEN:ADV-2009-3618 URL:~~http://www.vupen.com/english/advisories/2009/3618~~ (Obsolete source) XF:intel-chipset-sinit-priv-escalation(54963) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/54963
Assigning CNA
MITRE Corporation
Date Record Created
20091224	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20091224)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)