Lucene search

IntelCVE-2018-12210

HistoryMar 14, 2019 - 8:29 p.m.

CVE-2018-12210

2019-03-1420:29:00

CWE-119

intel

web.nvd.nist.gov

cve-2018-12210

pointer dereference

user mode driver

intel graphics driver

windows security

denial of service

nvd

vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Multiple pointer dereferences in User Mode Driver in Intel® Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.

Affected configurations

Nvd

Node

intelgraphics_driverMatch15.33.43.4425

intelgraphics_driverMatch15.33.45.4653

intelgraphics_driverMatch15.33.46.4885

intelgraphics_driverMatch15.36.26.4294

intelgraphics_driverMatch15.36.28.4332

intelgraphics_driverMatch15.36.31.4414

intelgraphics_driverMatch15.36.33.4578

intelgraphics_driverMatch15.36.34.4889

intelgraphics_driverMatch15.40.34.4624

intelgraphics_driverMatch15.40.36.4703

intelgraphics_driverMatch15.40.37.4835

intelgraphics_driverMatch15.40.38.4963

intelgraphics_driverMatch15.40.41.5058

intelgraphics_driverMatch15.45.18.4664

intelgraphics_driverMatch15.45.19.4678

intelgraphics_driverMatch15.45.21.4821

intelgraphics_driverMatch15.45.23.4860

intelgraphics_driverMatch24.20.100.6025

intelgraphics_driverMatch24.20.100.6094

intelgraphics_driverMatch24.20.100.6136

intelgraphics_driverMatch24.20.100.6194

intelgraphics_driverMatch24.20.100.6229

intelgraphics_driverMatch24.20.100.6286

AND

microsoftwindowsMatch-

VendorProductVersionCPE
intelgraphics_driver15.33.43.4425cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:*:*:*
intelgraphics_driver15.33.45.4653cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:*:*:*
intelgraphics_driver15.33.46.4885cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:*:*:*
intelgraphics_driver15.36.26.4294cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:*:*:*
intelgraphics_driver15.36.28.4332cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:*:*:*
intelgraphics_driver15.36.31.4414cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:*:*:*
intelgraphics_driver15.36.33.4578cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:*:*:*
intelgraphics_driver15.36.34.4889cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:*:*:*
intelgraphics_driver15.40.34.4624cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:*:*:*
intelgraphics_driver15.40.36.4703cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	graphics_driver	15.33.43.4425	cpe:2.3:a:intel:graphics_driver:15.33.43.4425:::::::*
intel	graphics_driver	15.33.45.4653	cpe:2.3:a:intel:graphics_driver:15.33.45.4653:::::::*
intel	graphics_driver	15.33.46.4885	cpe:2.3:a:intel:graphics_driver:15.33.46.4885:::::::*
intel	graphics_driver	15.36.26.4294	cpe:2.3:a:intel:graphics_driver:15.36.26.4294:::::::*
intel	graphics_driver	15.36.28.4332	cpe:2.3:a:intel:graphics_driver:15.36.28.4332:::::::*
intel	graphics_driver	15.36.31.4414	cpe:2.3:a:intel:graphics_driver:15.36.31.4414:::::::*
intel	graphics_driver	15.36.33.4578	cpe:2.3:a:intel:graphics_driver:15.36.33.4578:::::::*
intel	graphics_driver	15.36.34.4889	cpe:2.3:a:intel:graphics_driver:15.36.34.4889:::::::*
intel	graphics_driver	15.40.34.4624	cpe:2.3:a:intel:graphics_driver:15.40.34.4624:::::::*
intel	graphics_driver	15.40.36.4703	cpe:2.3:a:intel:graphics_driver:15.40.36.4703:::::::*

Rows per page:

1-10 of 241

CNA Affected

[
  {
    "product": "Intel(R) Graphics Driver for Windows",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple versions."
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-25084

www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2018-12210