Intel has admitted to the existence of flaws in its Centrino's wireless
technology that could be exploited by malicious hackers to spread code,
including worms, wirelessly between laptops.
According to a statement by Intel, the security vulnerabilities exist in the
Microsoft Windows drivers for certain versions of their Wireless Network
Connection hardware.
“Security vulnerabilities exist in the Microsoft Windows drivers for the
Intel 2200BG and 2915ABG PRO/Wireless Network Connection Hardware because of the
way that they currently handle certain frames. An attacker could potentially
exploit these vulnerabilities which could potentially lead to remote code
execution and system control,” Intel stated.
The firm added that these vulnerabilites which “could potentially be
exploited by attackers within range of the Wi-Fi station to execute arbitrary
code on the target system with kernel-level privileges. These flaws are due to a
memory corruption while parsing certain frames”.
Although Intel has published generic updates to its software, which
reportedly fix the issue on its website, the company recommends that users
contact their laptop manufacturers for vendor-specific information and fixes.
Intel has published more information about the security holes, and
information on which hardware is affected, on its
website
here.
"A hacker could exploit these wireless vulnerabilities to run malicious code
on an innocent user's laptop, giving them control over other people's PCs or
spreading a wireless worm which could leapfrog from one laptop to the next,"
said Graham Cluley, senior technology consultant for Sophos.
"The good news is that we haven't seen any attacks using this exploit yet,
but that doesn't mean computer users should be laid back about applying fixes."
Do you agree?
Have your say on this article