CVE-2018-3697

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
Intel Corporation	Intel Media Server Studio	Versions before 2019 Beta Release

References

http://www.securityfocus.com/bid/106025Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00197.htmlMitigation, Vendor Advisory
http://www.securityfocus.com/bid/106025Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00197.htmlMitigation, Vendor Advisory

Timeline

Published: Nov 14, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-36987.8Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged CVE-2018-36996.1Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access.CVE-2018-37006.7Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version CVE-2018-37017.8Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authentic CVE-2018-37027.8Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authent CVE-2018-37037.8Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated use CVE-2018-37047.8Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially CVE-2018-37055.5Improper directory permissions in the installer for the Intel(R) System Defense Utility (all versions) may allow authenticated users to pote CVE-2018-37107.8Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resultin CVE-2018-37117.5Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and CVE-2018-37126.5serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in path CVE-2018-37136.5angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a ma