HPSBHF03612 rev. 2 - Synaptics Audio Driver Package Allowing System Level Access to the Registry

Potential Security Impact

Escalation of privilege

Source: Synaptics, HP Product Security Response Team (PSRT)

Reported By: Synaptics

VULNERABILITY SUMMARY

A potential security vulnerability has been identified with the Synaptics (previously Conexant) Sound Device Driver CxUtilSVc.execomponent. Vulnerable versions of CxUtilSrv.exe can allow privileged access to the registry.

RESOLUTION

Audio drivers, which contain versions of this .exe file greater than or equal to v2.29.0.0, do not have this vulnerability. Drivers which do not contain this component are also not vulnerable.