CWE
200
Advisory Published
Updated

CVE-2017-8360: Infoleak

First published: Fri May 12 2017(Updated: )

Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any process. In mictray64.exe (mic tray icon) 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: debug messages accessible to any process that is running in the current user session, and filesystem access to C:\Users\Public\MicTray.log by any process.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Conexant Mictray64<=1.0.0.46
Hp Elite X2 1012 G1
Hp Elitebook 1030 G1
Hp Elitebook 725 G3
Hp Elitebook 745 G3
Hp Elitebook 755 G3
Hp Elitebook 820 G3
Hp Elitebook 828 G3
Hp Elitebook 840 G3
Hp Elitebook 848 G3
Hp Elitebook 850 G3
Hp Elitebook Folio 1040 G3
Hp Elitebook Folio G1
Hp Probook 430 G3
Hp Probook 440 G3
Hp Probook 446 G3
Hp Probook 450 G3
Hp Probook 455 G3
Hp Probook 470 G3
Hp Probook 640 G2
Hp Probook 645 G2
Hp Probook 650 G2
Hp Probook 655 G2
Hp Zbook 15 G3
Hp Zbook 15u G3
Hp Zbook 17 G3
Hp Zbook Studio G3
Microsoft Windows 10
Microsoft Windows 7

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203