CVE-2016-5647: High severity intel graphics drivers for windows vulnerability

Q: What is the severity of CVE-2016-5647?

CVE-2016-5647 is considered a medium severity vulnerability due to its potential to cause denial of service or privilege escalation.

Q: How do I fix CVE-2016-5647?

To fix CVE-2016-5647, update to the latest version of the Intel Graphics Driver that is not affected by this vulnerability.

Q: Who is affected by CVE-2016-5647?

CVE-2016-5647 affects local users of Intel Graphics Drivers versions 15.33.42.435 through 15.40.4404 on Windows.

Q: What type of attack does CVE-2016-5647 enable?

CVE-2016-5647 enables local users to conduct denial of service attacks or escalate privileges through crafted D3DKMTEscape requests.

Q: What systems are vulnerable to CVE-2016-5647?

Vulnerable systems include those running Intel Graphics Drivers within the specified version ranges on the Windows operating system.

Published Dec 13, 2016

Updated

The igdkmd64 module in the Intel Graphics Driver through 15.33.42.435, 15.36.x through 15.36.30.4385, and 15.40.x through 15.40.4404 on Windows allows local users to cause a denial of service (crash) or gain privileges via a crafted D3DKMTEscape request.

Affected Software

3 affected components

Intel Graphics Driver>=15.33<=15.33.42.4358

Intel Graphics Driver>=15.36<=15.36.30.4385

Intel Graphics Driver>=15.40<=15.40.4404

Remediation

Patch Available

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00054&languageid=en-fr

Event History

Dec 13, 2016

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5647?

CVE-2016-5647 is considered a medium severity vulnerability due to its potential to cause denial of service or privilege escalation.

How do I fix CVE-2016-5647?