CVE-2017-8360 Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any process. In mictray64.exe (mic tray icon) 1.0.0.46, a LowLevelKeyb...
MediumCVSS 5.5
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any process. In mictray64.exe (mic tray icon) 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: debug messages accessible to any process that is running in the current user session, and filesystem access to C:\Users\Public\MicTray.log by any process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| conexant mictray64 | <= 1.0.0.46 | No fix listed |
References
- 1038527 vdb-entry
- www.modzero.ch exploit mitigation technical-description third-party-advisory
- www.modzero.ch exploit technical-description third-party-advisory