CVEvulnerability

CVE-2008-7096

6.9 MEDIUM Published 2009-08-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-08-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory memory as demonstrated at Black Hat 2008 by accessing certain remapping registers in Xen 3.3.

Affected configurations

• intel bios dg33bu • intel bios dg33fb • intel bios dg33tl • intel bios dp35dp • intel bios dq35jo • intel bios dq35mp • intel bios dx38bt • intel bios mgm965tw

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-1260 Improper Handling of Overlap Between Protected Memory Ranges weakness

References