Vulnerabilities in Intel PRO/Centrino wireless drivers

Madrid, August 3, 2006 - Several vulnerabilities have been confirmed in multiple Intel PRO/Centrino wireless drivers for Windows, which could allow a remote user to run arbitrary code on affected systems.

The Microsoft Windows drivers (w22n50.sys, w22n51.sys, w29n50.sys, w29n51.sys) for Intel 2200BG and 2915ABG PRO/Wireless Network Connection hardware do not correctly process wireless frames. A remote attacker could send specially-crafted frames to run arbitrary code on the system with kernel level privileges.

The Intel PROSet/Wireless software versions 7.x, 8.x, 9.x and 10.x make insecure use of shared memory. A local user could view security information about the wireless network, such as WEP keys or user authentication credentials.

A final problem in the Microsoft Windows drivers for Intel 2100 PRO/Wireless Network Connection is that they do not correctly handle certain frames received from user-level applications or higher-level protocol drivers. A local user could exploit this flaw to run arbitrary code on the affected system.

Intel has released updated versions of the drivers, which are available at http://support.intel.com/support/wireless/wlan/sb/cs-010623.htm

Oxygen3 24h-365d
by Panda Software

2006-08-03 15:15

Back

IT News: