What’s Vulnerable › Vulnerabilities

CVE-2008-7096

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-08-27 · updated 2026-06-16
• Weakness: CWE-264

Description

Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory memory as demonstrated at Black Hat 2008 by accessing certain remapping registers in Xen 3.3.

Affected products

• Intel BIOS: dg33bu, dg33fb, dg33tl, dp35dp, dq35jo, dq35mp (+2)

References

• http://invisiblethingslab.com/bh08/part2-full.pdf
• http://osvdb.org/49901
• http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00017&languageid=en-fr
• http://theinvisiblethings.blogspot.com/2008/08/attacking-xen-domu-vs-dom0.html
• http://theinvisiblethings.blogspot.com/2008/08/intel-patches-q35-bug.html
• http://www.securityfocus.com/bid/30823
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44676
• http://invisiblethingslab.com/bh08/part2-full.pdf
• http://osvdb.org/49901
• http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00017&languageid=en-fr
• http://theinvisiblethings.blogspot.com/2008/08/attacking-xen-domu-vs-dom0.html
• http://theinvisiblethings.blogspot.com/2008/08/intel-patches-q35-bug.html

Get alerted when CVE-2008-7096 or the next vulnerability affects your stack