CVE-2009-4419

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-12-24 · updated 2026-06-16
Weakness: CWE-16

Description

Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.

Affected products

Intel Gm45 Chipset: all versions
Intel Pm45 Express Chipset: all versions
Intel Q35 Chipset: all versions
Intel Q43 Express Chipset: all versions
Intel Q45 Chipset: all versions

References

http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf
http://osvdb.org/61248
http://secunia.com/advisories/37900
http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00021&languageid=en-fr
http://theinvisiblethings.blogspot.com/2009/12/another-txt-attack.html
http://www.securityfocus.com/bid/37430
http://www.securitytracker.com/id?1023382
http://www.vupen.com/english/advisories/2009/3618
https://exchange.xforce.ibmcloud.com/vulnerabilities/54963
http://invisiblethingslab.com/resources/misc09/Another%20TXT%20Attack.pdf
http://osvdb.org/61248
http://secunia.com/advisories/37900

Get alerted when CVE-2009-4419 or the next vulnerability affects your stack