CVE-2008-7096: Medium severity intel bios firmware vulnerability

Published Aug 27, 2009

Updated

Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory memory as demonstrated at Black Hat 2008 by accessing certain remapping registers in Xen 3.3.

Affected Software

8 affected components

Intel BIOS=dq35mp

Intel BIOS=dq35jo

Intel BIOS=dg33tl

Intel BIOS=dg33bu

Intel BIOS=dx38bt

Intel BIOS=dp35dp

Intel BIOS=dg33fb

Intel BIOS=mgm965tw

Remediation

Patch Available

http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00017&languageid=en-fr

Event History

Aug 27, 2009

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-7096?

CVE-2008-7096 is considered a critical vulnerability due to its potential for local privilege escalation.

How do I fix CVE-2008-7096?

To fix CVE-2008-7096, users should update to the latest BIOS firmware provided by Intel for affected boards.

What systems are affected by CVE-2008-7096?

CVE-2008-7096 affects multiple Intel Desktop and Mobile boards including DQ35JO, DQ35MP, and others listed in the vulnerability description.

Who can exploit CVE-2008-7096?

CVE-2008-7096 can be exploited by local administrators with ring 0 privileges on the affected systems.

What are the consequences of CVE-2008-7096 exploitation?

Exploitation of CVE-2008-7096 allows an attacker to gain additional privileges and potentially modify critical code running in System Management Mode.