The copy would also change directory to %TEMP% and execute the batch script %TEMP%setup.bat. Other issue was that the copy of the executable self-extractor would run with administrative privileges, but the extracted payloads (the installers setup.exe and setup64.exe, and the batch script setup.bat) are dropped unprotected into the user’s %TEMP% directory. Because the folder and the copy inherit the NTFS access control list from %TEMP%, once execution of files from that directory is denied, the installer would fail to execute. One issue was that the installer created a randomly named folder in the %TEMP% directory, copied itself into it, and then executed the copy. The issue is that the IPDT installer creates three files with improper permissions, thus opening the door to said vulnerabilities. “This precondition holds for the majority of Windows installations: according to Microsoft’s own security intelligence reports, about 1/2 to 3/4 of the about 600 million Windows installations which send telemetry data have only ONE active user account,” Kanthak points out. The security flaws can be exploited in standard Windows installations where a user UAC-protected administrator account that is created during Windows setup is used, without elevation. Kanthak says he found a total of four vulnerabilities in the executable installers of Intel’s tool, three of which would lead to arbitrary code execution with escalation of privilege, and a fourth that could lead to denial of service. The recently addressed vulnerabilities (two of which are tracked as CVE-2018-3667 and CVE-2018-3668) were found by Stephan Kanthak and affect the IPDT releases up to v4.1.0.24, Intel reveals.
It can check for brand identification and operating frequency, test specific features, and perform a stress test on the processor. The Intel Processor Diagnostic Tool (IPDT) is a piece of software designed to verify the functionality of an Intel processor.
Intel has updated its Processor Diagnostic Tool to address vulnerabilities that could lead to arbitrary code execution and escalation of privileges.
0 kommentar(er)
