Ruben Santamarta has reported some vulnerabilities in Realtek HD Audio Codec drivers, which can be exploited by malicious, local users to disclose certain information, manipulate certain data, or gain escalated privileges.

The vulnerabilities are caused due to input validation errors when handling certain IOCTL requests and can be exploited to create, read, or write arbitrary registry keys or to execute arbitrary code with kernel privileges.

The vulnerabilities are reported in RTKVHDA.sys and RTKVHDA64.sys versions prior to 6.0.1.5605.

Solution
Update to the latest versions.

Provided and/or discovered by
Ruben Santamarta, Wintercore

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.wintercore.com/advisories/advisory_W010408.html

Deep Links
Links available to Secunia VIM customers