← Database

CVE-2009-4419

HIGH CVSS: 7.2 Published: 2009-12-24 Modified: 2026-06-16

Description

Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM), which allows local users to bypass the Trusted Execution Technology protection mechanism and gain privileges by modifying the MCHBAR register to point to an attacker-controlled region, which prevents the SENTER instruction from properly applying VT-d protection while an MLE is being loaded.

Affected Platforms

Intel Q35 ChipsetIntel Pm45 Express ChipsetIntel Gm45 ChipsetIntel Q45 ChipsetIntel Q43 Express Chipset

Weakness Type

CWE-16

References