Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Driver_update_utility | Intel | 2.0 (including) | 2.0 (including) |
| Driver_update_utility | Intel | 2.1 (including) | 2.1 (including) |
| Driver_update_utility | Intel | 2.2 (including) | 2.2 (including) |
| Driver_update_utility | Intel | 2.3 (including) | 2.3 (including) |