A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.

Project Subscriptions

Vendors Products
Thinkpad 10 Subscribe
Thinkpad 11e Subscribe
Thinkpad 13 Subscribe
Thinkpad L450 Subscribe
Thinkpad L460 Subscribe
Thinkpad L470 Kbl Subscribe
Thinkpad L470 Skl Subscribe
Thinkpad L560 Subscribe
Thinkpad P50 Subscribe
Thinkpad P50s Subscribe
Thinkpad P51s Subscribe
Thinkpad P70 Subscribe
Thinkpad P71 Subscribe
Thinkpad S1 Subscribe
Thinkpad S1 Yoga Subscribe
Thinkpad S1 Yoga 12 Subscribe
Thinkpad S2 Subscribe
Thinkpad T440 Subscribe
Thinkpad T440p Subscribe
Thinkpad T440s Subscribe
Thinkpad T450 Subscribe
Thinkpad T450s Subscribe
Thinkpad T460 Subscribe
Thinkpad T460p Subscribe
Thinkpad T460s Subscribe
Thinkpad T470 Subscribe
Thinkpad T470p Subscribe
Thinkpad T470s Skl Subscribe
Thinkpad T540p Subscribe
Thinkpad T550 Subscribe
Thinkpad T560 Subscribe
Thinkpad T570 Subscribe
Thinkpad W540 Subscribe
Thinkpad W541 Subscribe
Thinkpad W550s Subscribe
Thinkpad X1 Carbon Subscribe
Thinkpad X1 Tablet Subscribe
Thinkpad X1 Yoga Subscribe
Thinkpad X1c Subscribe
Thinkpad X240 Subscribe
Thinkpad X240s Subscribe
Thinkpad X250 Subscribe
Thinkpad X260 Subscribe
Thinkpad X270 Kbl Subscribe
Thinkpad X270 Skl Subscribe
Thinkpad Yoga 11e Subscribe
Realtek Subscribe
Audio Driver Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2017-12884 A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-09-17T01:27:06.643Z

Reserved: 2016-12-16T00:00:00

Link: CVE-2017-3767

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-11-13T16:29:00.293

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-3767

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses