NVD

Id
51542  
Name
CVE-2009-4419  
Description
Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-12-24  
Modified Date
2009-12-28  
Seq
2009-4419  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261353 51542 CVE-2009-4419 http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf  View
261354 51542 CVE-2009-4419 http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021&languageid=en-fr  View
261355 51542 CVE-2009-4419 http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html  View
261356 51542 CVE-2009-4419 37430  View
261357 51542 CVE-2009-4419 1023382  View
261358 51542 CVE-2009-4419 ADV-2009-3618  View
261359 51542 CVE-2009-4419 intel-chipset-sinit-priv-escalation(54963)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44225 JVNDB-2009-005232 SINIT Authenticated Code Module (ACM) の Intel Q35 などにおける権限を取得される脆弱性 SINIT Authenticated Code Module (ACM) の Intel Q35、GM45、PM45 Express、Q45 および Q43 Express チップセットには、Trusted Execution Technology 保護メカニズムを回避される、および権限を取得される脆弱性が存在します。 CVE-2009-4419 41850 CVE-2009-4419 51542 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005232.html 2009-12-21 2012-09-25 View