Escalation of Privilege
Source: HP, HP Product Security Response Team (PSRT)
Reported by: Intel
HP has been informed of potential security vulnerabilities in the Intel Smart Sound Technologies driver module prior to version 9.21.00.354. These vulnerabilities potentially allow a local attacker to execute arbitrary code as administrator via a non-paged pool overflow, a buffer overflow, or a system call.
VULNERABILITY SUMMARY
Reference
|
Base Vector
|
Base Score
|
CVE-2018-3666
|
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
|
7.5
|
CVE-2018-3670
|
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
|
7.5
|
CVE-2018-3672
|
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
|
7.5
|
Product Name
|
Updated Version
|
Softpaq #
|
Softpaq Link
|
HP Elite x2 1012 G1
|
10.0.3690.118.Q.50
|
SP94989
| |
HP Elite x2 1012 G2
|
10.0.3690.118.Q.50
|
SP94989
| |
HP Elite x2 1013 G3
|
12.37.1.102.Q.5
|
SP95015
| |
HP EliteBook 1030 G1
|
10.0.3690.118.Q.50
|
SP94989
| |
HP EliteBook 1040 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP EliteBook 820 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP EliteBook 820/828 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP EliteBook 830 G5
|
12.37.1.102.Q.5
|
SP95015
| |
HP EliteBook 840 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP EliteBook 840 G5
|
12.37.1.102.Q.5
|
SP95015
| |
HP EliteBook 840 G5 HC Edition
|
12.37.1.102.Q.5
|
SP95015
| |
HP EliteBook 840/848 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP EliteBook 840r G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP EliteBook 850 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP EliteBook 850 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP EliteBook 850 G5
|
12.37.1.102.Q.5
|
SP95015
| |
HP EliteBook Folio 1040 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP EliteBook Folio G1
|
10.0.3690.118.Q.50
|
SP94989
| |
HP EliteBook x360 1020 G2
|
11.49.3690.124.Q.5
|
SP92177
| |
HP EliteBook x360 1030 G2
|
11.27.3690.134.Q.5
|
SP95006
| |
HP EliteBook x360 1030 G3
|
12.37.1.102.Q.5
|
SP95015
| |
HP Engage Go Mobile System
|
9.21.00.3690
|
SP91512
| |
HP mt21 Mobile Thin Client
|
9.0.216.0
|
SP92290
| |
HP Pro x2 612 G2
|
11.27.3690.134.Q.5
|
SP95006
| |
HP Pro X2 612 G2 Retail Solution with Retail Case
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ProBook 430 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ProBook 430 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ProBook 430 G5
|
12.37.1.102.Q.5
|
SP95015
| |
HP ProBook 440 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ProBook 440 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ProBook 440 G5
|
12.37.1.102.Q.5
|
SP95015
| |
HP ProBook 450 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ProBook 450 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ProBook 450 G5
|
12.37.1.102.Q.5
|
SP95015
| |
HP ProBook 470 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ProBook 470 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ProBook 470 G5
|
12.37.1.102.Q.5
|
SP95015
| |
HP ProBook 640 G2
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ProBook 640 G3
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ProBook 640 G4
|
12.37.1.102.Q.5
|
SP95015
| |
HP ProBook 650 G2
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ProBook 650 G3
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ProBook 650 G4
|
12.37.1.102.Q.5
|
SP95015
| |
HP ProBook x360 440 G1
|
11.49.3690.124.Q.5
|
SP95015
| |
HP ZBook 14u G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ZBook 14u G5
|
12.37.1.102.Q.5
|
SP95015
| |
HP ZBook 15 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ZBook 15 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ZBook 15u G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ZBook 15u G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ZBook 15u G5
|
12.37.1.102.Q.5
|
SP95015
| |
HP ZBook 17 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ZBook 17 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ZBook Studio G3
|
10.0.3690.118.Q.50
|
SP94989
| |
HP ZBook Studio G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ZBook x2 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
HP ZHAN 66 Pro G1
|
12.37.1.102.Q.5
|
SP95015
|
Product Name
|
Updated Version
|
Softpaq #
|
Softpaq Link
|
HP ENVY 13-ad001 ~ 13-ad099
|
6.0.1.8569
|
SP93113
| |
HP ENVY 13-ad100 ~ 13-ad199
|
6.0.1.8569
|
SP93113
| |
HP ENVY 13-ah4000 ~ 13-ah4999
|
6.0.1.8544
|
SP92549
| |
HP ENVY 13-ah4000 ~ 13-ah4999
|
6.0.1.8515
|
SP91852
| |
HP ENVY 17m-ae001 ~ 17m-ae099
|
6.0.1.8569
|
SP93113
| |
HP ENVY 17m-ae100 ~ 17m-ae199
|
6.0.1.8569
|
SP93113
| |
HP ENVY 17t-bw0000
|
6.0.1.8509
|
SP91517
| |
HP ENVY x360 13-ab001 ~ 13-ab099
|
6.0.1.8569
|
SP93113
| |
HP ENVY x360 13t-ab000 (CTO)
|
6.0.1.8569
|
SP93113
| |
HP ENVY x360 15-bp0xx (ROW)
|
6.0.1.8393
|
SP87889
| |
HP ENVY x360 15-bp1xx (ROW)
|
6.0.1.8393
|
SP87889
| |
HP ENVY x360 15m-bp1xx (BBY)
|
6.0.1.8393
|
SP87889
| |
HP ENVY x360 15m-cn0xxxx
|
6.0.1.8509
|
SP91517
| |
HP ENVY x360 15m-cn1xxx
|
6.0.1.8509
|
SP91517
| |
HP ENVY x360 m6-bp0xx (BBY)
|
6.0.1.8393
|
SP87889
| |
HP Pavilion 15-cs0000 ~ 15-cs0999
|
6.0.1.8515
|
SP91852
| |
HP Pavilion 15-cu0000~15-cu0999
|
6.0.1.8515
|
SP91852
| |
HP Spectre 13-ab000 ~ 13-ab099
|
6.0.1.8536
|
SP92752
| |
HP Spectre 13-ae0xx
|
6.0.1.8536
|
SP92752
| |
HP Spectre 13-af0xx
|
6.0.1.8510
|
SP92017
| |
HP Spectre 13-af1xx
|
6.0.1.8510
|
SP92017
| |
HP Spectre 15-bl000 ~ 15-bl099
|
6.0.1.8536
|
SP92752
| |
HP Spectre 15-ch0xx
|
6.0.1.8536
|
SP92752
| |
HP Spectre x2 12-c000~12c-c099
|
6.0.1.8544
|
SP92527
| |
HP Spectre x360 13-w000 ~ 13-w099
|
6.0.1.8536
|
SP92752
|
PI
|
HP Printing and Imaging
|
HF
|
HP Hardware and Firmware
|
GN
|
HP General Software
|