SkipNavigation
Home | FAQ | Contact | Privacy Policy
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric
 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

Vulnerability Note VU#524332

Intel Centrino wireless drivers fail to properly process malformed frames

Overview

Microsoft Windows drivers for Intel Centrino wireless adapters fail to properly handle malformed frames. This vulnerability may allow an attacker to execute arbitrary code.

I. Description

The Microsoft Windows drivers for Intel Centrino 2200BG and 2915ABG PRO wireless adapters fail to properly handle malformed frames. If an attacker within 802.11 radio range of an affected wireless adapter sends a specially crafted frame to that adapter, they may be able to trigger this vulnerability.

Affected drivers include w22n50.sys, w22n51.sys, w29n50.sys, and w29n51.sys. For more information refer to Intel Security Advisory INTEL-SA-00001.

II. Impact

An unauthenticated, remote attacker may be able to execute arbitrary code with kernel-level privileges.

III. Solution

Upgrade Intel drivers

Intel has released updates to address this issue. The Intel support site also provides a tool to assist users in determining the model and version of the wireless adapter they are using.

Disable the affected wireless adapter

Until updates can be applied, turning off the affected wireless adapter may mitigate this vulnerability.

Systems Affected

VendorStatusDate NotifiedDate Updated
Intel CorporationVulnerable5-Apr-2007

References


http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00001&languageid=en-fr
http://support.intel.com/support/wireless/wlan/sb/cs-005905.htm
http://www.intel.com/network/connectivity/products/wireless/prowireless_mobile.htm
http://www.milw0rm.org/exploits/3158

Credit

This issue was made public by Giuseppe Gottardi.

This document was written by Ryan Giobbi.

Other Information

Date Public:2007-01-22
Date First Published:2007-04-05
Date Last Updated:2007-04-09
CERT Advisory: 
CVE-ID(s): 
NVD-ID(s): 
US-CERT Technical Alerts: 
Metric:4.45
Document Revision:10

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Produced 2007 by US-CERT, a government organization
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader