CVE-2016-1493 Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel driver update utility | = 2.0 | No fix listed |
| intel driver update utility | = 2.1 | No fix listed |
| intel driver update utility | = 2.2 | No fix listed |
| intel driver update utility | = 2.3 | No fix listed |
References
- packetstormsecurity.com
- 20160119 [CORE-2016-0001] - Intel Driver Update Utility MiTM mailing-list
- www.coresecurity.com
- 20160119 [CORE-2016-0001] - Intel Driver Update Utility MiTM mailing-list
- security-center.intel.com patch vendor-advisory