Intel Centrino Wireless Driver Malformed Frame Remote Command Execution Vulnerability
Technical Description



A vulnerability has been identified in Intel PRO/Wireless 2200BG and2915ABG drivers, which could be exploited by remote attackers to takecomplete control of an affected system. This flaw is due to memorycorruption errors in the "w22n50.sys", "w22n51.sys", "w29n50.sys", and"w29n51.sys" drivers when handling malformed frames, which could beexploited by attackers within range of the Wi-Fi station to executearbitrary commands on a vulnerable system with kernel-level privileges.



Affected Products



Intel PROSet/Wireless versions prior to 10.5 (driver version 9.0.4.16)



Intel PRO/Wireless 2200BG Network Connection Hardware

Intel PRO/Wireless 2915ABG Network Connection Hardware



Solution



Upgrade to Intel PROSet version 10.5 (drvr version 9.0.4.16) :

http://support.intel.com/support/wireless/wlan/sb/cs-005905.htm
더보기

댓글,