Intel warns of major flaw in driver update software

By

Urges customers to apply patch.

Intel has patched a major flaw in its driver utility tool that could allow attackers to install malware on victim PCs remotely.

Intel warns of major flaw in driver update software

The chipmaker has issued a patch advisory for its Driver Update Utility, urging customers to download the new version of the software.

The tool analyses system drivers on a user's computer and reports on and downloads any new drivers that are available.

The flaw - which exists because the software requests new drivers from Intel servers over an unencrypted connection - allows attackers to instigate man-in-the-middle attacks and cause the download of malicious files and software on victim PCs.

Proof of concept exploits of the vulnerability have already been posted online.

Versions 2.0 to 2.3 are affected, Intel said. It is urging customers to download version 2.4, which uses a secure SSL connection to request new drivers from Intel servers.

Intel was alerted to the flaw by infosec firm Core Security last November.

The firm said attackers could easily bypass the software's verification and therefore exploit the flaw without difficulty.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © iTnews.com.au . All rights reserved.
Tags:

Most Read Articles

Ex-student charged over Western Sydney University cyberattacks

Ex-student charged over Western Sydney University cyberattacks

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

SA Water plans 'once-in-a-generation' core technology uplift

SA Water plans 'once-in-a-generation' core technology uplift

Sportsbet recruits 'security champions' in shift-left strategy

Sportsbet recruits 'security champions' in shift-left strategy

Log In

  |  Forgot your password?