CVE-2017-5707

Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code.

Score

CVSS 3.0 7.8 High

Status

Modified - secure@intel.com

Published

2017-11-21

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Trusted Execution Engine Firmware (Intel)
• Trusted Execution Engine (Intel Corporation)

References

• http://www.securityfocus.com/bid/101919
• https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
• https://security.netapp.com/advisory/ntap-20171120-0001/
• https://twitter.com/PTsecurity_UK/status/938447926128291842
• https://www.asus.com/News/wzeltG5CjYaIwGJ0
• https://www.synology.com/support/security/Synology_SA_17_73