Vulnerability Details : CVE-2008-7096
Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory memory as demonstrated at Black Hat 2008 by accessing certain remapping registers in Xen 3.3.
Products affected by CVE-2008-7096
- cpe:2.3:h:intel:bios:dp35dp:*:*:*:*:*:*:*
- cpe:2.3:h:intel:bios:dg33fb:*:*:*:*:*:*:*
- cpe:2.3:h:intel:bios:mgm965tw:*:*:*:*:*:*:*
- cpe:2.3:h:intel:bios:dg33bu:*:*:*:*:*:*:*
- cpe:2.3:h:intel:bios:dg33tl:*:*:*:*:*:*:*
- cpe:2.3:h:intel:bios:dx38bt:*:*:*:*:*:*:*
- cpe:2.3:h:intel:bios:dq35jo:*:*:*:*:*:*:*
- cpe:2.3:h:intel:bios:dq35mp:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-7096
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 16 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2008-7096
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.9
|
MEDIUM | AV:L/AC:M/Au:N/C:C/I:C/A:C |
3.4
|
10.0
|
NIST |
CWE ids for CVE-2008-7096
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-7096
-
http://www.securityfocus.com/bid/30823
-
http://theinvisiblethings.blogspot.com/2008/08/attacking-xen-domu-vs-dom0.html
-
http://theinvisiblethings.blogspot.com/2008/08/intel-patches-q35-bug.html
-
http://osvdb.org/49901
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/44676
-
http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00017&languageid=en-fr
Patch;Vendor Advisory
-
http://invisiblethingslab.com/bh08/part2-full.pdf
Jump to