ID
VAR-200707-0307
CVE
CVE-2006-7215
TITLE
Intel Core 2 Extreme Processor X6800 Vulnerability in
Trust: 0.8
DESCRIPTION
The Intel Core 2 Extreme processor X6800 and Core 2 Duo desktop processor E6000 and E4000 incorrectly set the memory page Access (A) bit for a page in certain circumstances involving proximity of the code segment limit to the end of a code page, which has unknown impact and attack vectors on certain operating systems other than OpenBSD, aka AI90. (A) There are vulnerabilities that are unspecified because they set the bits incorrectly.It may be affected unspecified. Intel Core 2 processors are prone to multiple local denial-of-service vulnerabilities. Attackers can exploit these issues to deny service to legitimate users. Intel CORE 2 is a very popular dual-core processor. Multiple denial of service vulnerabilities exist in CORE 2 processors: If the temperature reaches an invalid temperature, the CPU will not generate a Thermal interrupt even if the set threshold has been exceeded; during the execution of a series of REP store instructions, the store may be Attempts to allocate memory before completing the instruction, resulting in processor lockup and/or system hang; if one logical processor writes to a non-dirty page, another logical processor writes to the same non-dirty page or If the dirty bit is explicitly set in the page table entry of the core, the complex interaction of internal processor behavior can cause unpredictable system behavior and hang; if requesting data from Core 1 causes the L1 cache to be missed, the request will be sent to the L2 cache. If the request encounters a modified line in Core 2's L1 data cache, certain internal requests may cause incorrect data to be returned to Core 1. #PF code may be mishandled if: 1 PDE is modified without validating the relevant TLB entry 2 Code execution diverts to a different code page that satisfies both of the following conditions: * The target linear address is equal to the modified PDE * The PTE of the target linear address contains an explicit A (Accessed) bit 3 One of the following simultaneous exceptions occurs after code diversion: * #DB code and #PF code* Segmentation limit violation #GP code and #PF code software It can be seen that the #PF code is incorrectly processed before the segmentation fault destroys the #GP code, or the #PF code is processed instead of the #DB code
Trust: 1.98
AFFECTED PRODUCTS
| vendor: | intel | model: | core 2 duo e4000 | scope: | - | version: | - | Trust: 1.4 |
| vendor: | intel | model: | core 2 duo e6000 | scope: | - | version: | - | Trust: 1.4 |
| vendor: | intel | model: | core 2 extreme x6800 | scope: | - | version: | - | Trust: 1.4 |
| vendor: | intel | model: | core 2 duo e6000 | scope: | eq | version: | * | Trust: 1.0 |
| vendor: | intel | model: | core 2 extreme x6800 | scope: | eq | version: | * | Trust: 1.0 |
| vendor: | intel | model: | core 2 duo e4000 | scope: | eq | version: | * | Trust: 1.0 |
| vendor: | intel | model: | core | scope: | eq | version: | 20 | Trust: 0.3 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | NVD-CWE-Other | Trust: 1.0 |
THREAT TYPE
local
Trust: 0.9
TYPE
Design Error
Trust: 0.9
CONFIGURATIONS
PATCH
| title: | Top page | url: | http://www.intel.co.jp/ | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2006-7215 | Trust: 2.8 |
| db: | BID | id: | 24702 | Trust: 2.0 |
| db: | JVNDB | id: | JVNDB-2007-003163 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-200707-035 | Trust: 0.7 |
| db: | MLIST | id: | [OPENBSD-MISC] 20070627 INTEL CORE 2 | Trust: 0.6 |
| db: | FULLDISC | id: | 20070628 RE: INTEL CORE 2 CPUS ARE BUGGY. PATCH YOUR CPUS :D | Trust: 0.6 |
| db: | VULHUB | id: | VHN-23323 | Trust: 0.1 |
REFERENCES
| url: | http://download.intel.com/design/processor/specupdt/31327914.pdf | Trust: 2.0 |
| url: | http://www.matasano.com/log/894/theo-de-raadt-intel-core-2-bugs-assuredly-exploitable-from-userland/ | Trust: 2.0 |
| url: | http://marc.info/?l=openbsd-misc&m=118296441702631&w=2 | Trust: 1.9 |
| url: | http://www.securityfocus.com/bid/24702 | Trust: 1.7 |
| url: | http://seclists.org/fulldisclosure/2007/jun/0605.html | Trust: 1.7 |
| url: | http://www.geek.com/images/geeknews/2006jan/core_duo_errata__2006_01_21__full.gif | Trust: 1.1 |
| url: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-7215 | Trust: 0.8 |
| url: | http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-7215 | Trust: 0.8 |
| url: | http://www.intel.com/ | Trust: 0.3 |
| url: | http://marc.info/?l=openbsd-misc&m=118296441702631&w=2 | Trust: 0.1 |
CREDITS
Theo de Raadt※ deraadt@cvs.openbsd.org
Trust: 0.6
SOURCES
| db: | VULHUB | id: | VHN-23323 |
| db: | BID | id: | 24702 |
| db: | JVNDB | id: | JVNDB-2007-003163 |
| db: | CNNVD | id: | CNNVD-200707-035 |
| db: | NVD | id: | CVE-2006-7215 |
LAST UPDATE DATE
2025-04-10T23:09:44.395000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-23323 | date: | 2008-09-05T00:00:00 |
| db: | BID | id: | 24702 | date: | 2015-05-07T17:37:00 |
| db: | JVNDB | id: | JVNDB-2007-003163 | date: | 2012-09-25T00:00:00 |
| db: | CNNVD | id: | CNNVD-200707-035 | date: | 2007-07-25T00:00:00 |
| db: | NVD | id: | CVE-2006-7215 | date: | 2025-04-09T00:30:58.490 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-23323 | date: | 2007-07-03T00:00:00 |
| db: | BID | id: | 24702 | date: | 2007-06-28T00:00:00 |
| db: | JVNDB | id: | JVNDB-2007-003163 | date: | 2012-09-25T00:00:00 |
| db: | CNNVD | id: | CNNVD-200707-035 | date: | 2007-06-28T00:00:00 |
| db: | NVD | id: | CVE-2006-7215 | date: | 2007-07-03T21:30:00 |