CVE Database
/

CVE-2009-4419

Back to search

CVE-2009-4419

Published: Dec 24, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.

VendorProductVersions

n/a

n/a

affected
n/a

References

1023382
vdb-entry
x_refsource_SECTRACK
37430
vdb-entry
x_refsource_BID
61248
vdb-entry
x_refsource_OSVDB
ADV-2009-3618
vdb-entry
x_refsource_VUPEN
37900
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now