sur Internet
sur ground418

Exploits et Vulnérabilités logiciel sur ground418

Résumé / Abstract :

Des nouveaux pilotes pour adaptateurs ethernet Intel contiennent des fichiers DLL vulnérables.

---

Texte original (anglais) :

Hi @ll,

Intel just released updated drivers for their ethernet network adaptors,
see
<http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=17906&Pr
odId=3025〈=eng>
and
<http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=18518&Pr
odId=3025〈=eng>
for example.

Unfortunately ALL these driver packages but contain an outdated and
unsupported "Microsoft Visual C++ 2008 Runtime", repackaged as
VC90_CRT_{x86,ia64,x64}.msi and violating Microsofts redistribution
rules, which installs VULNERABLE runtime DLLs.

See <http://support.microsoft.com/kb/973551>,
<http://support.microsoft.com/kb/973552> and
<http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx>

Stefan Kanthak