Escalation of privilege
Source: Synaptics, HP Product Security Response Team (PSRT)
Reported By: Synaptics
SUPPORT COMMUNICATION- SECURITY BULLETIN
Document ID: c06298607
Version: 2
HPSBHF03612 rev. 2 - Synaptics Audio Driver Package Allowing System Level Access to the Registry
Notice: The information in this security bulletin should be acted upon as soon as possible.
Release date : 12-Apr-2019
Last updated : 30-Oct-2019
A potential security vulnerability has been identified with the Synaptics (previously Conexant)
Sound Device Driver CxUtilSVc.exe component. Vulnerable versions of
CxUtilSrv.exe can allow privileged access to the registry.
CVE-2019-9730, PSR-2019-0079
See the RESOLUTION section for impacted products.
For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com
CVSS 3.0 Base Metrics
|
Reference
|
Base Vector
|
Base Score
|
|
CVE-2019-9730
|
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
8.8
|
Audio drivers, which contain versions of this .exe file greater than or equal to v2.29.0.0, do not have this vulnerability. Drivers which do not contain this component are also not vulnerable.
note:This bulletin might be updated when new information and/or SoftPaqs are available. Sign up for HP Subscriptions to be notified and receive:
HP recommends keeping your system up to date with the latest software and drivers.
Pending: Softpaq is in progress.
Under investigation: System under investigation for impact, or Softpaq under investigation for feasibility/availability.
Not available: Softpaq not available due to technical or logistical constraints.
Business PCs and Retail Point-of-Sale Systems
|
Product Name
|
Updated Version
|
SoftPaq #
|
SoftPaq Link
|
|
HP 260 G3 Desktop Mini PC
|
8.65.281.1.A.1
|
SP95167
| |
|
HP 280 G3 Microtower PC
|
8.65.244.5.A.1
|
SP94978
| |
|
HP Elite Slice
|
8.65.198.9.A.1 (Win7)8.65.261.191.A.1 (Win10)
|
SP95036
| |
|
HP Elite Slice for Meeting Rooms G2 for Intel Unite
|
8.65.261.191.A.1
|
SP95036
| |
|
HP Elite Slice for Meeting Rooms G2 for Skype Room Systems
|
8.65.261.191.A.1
|
SP95036
| |
|
HP Elite x2 1012 G1 Tablet
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP Elite x2 1013 G1
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook 1040 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook 1040 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP EliteBook 645 G2
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook 655 G2
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook 725 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook 725 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP EliteBook 725 G4
|
11.27.3690.134.Q.57 (Win7)
|
SP95008
| |
|
HP EliteBook 735 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook 745 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook 745 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP EliteBook 745 G4
|
11.27.3690.134.Q.57 (Win7)
|
SP95008
| |
|
HP EliteBook 745 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook 755 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook 755 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP EliteBook 755 G4
|
11.27.3690.134.Q.57 (Win7)
|
SP95008
| |
|
HP EliteBook 755 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook 820/720 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook 820/720 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP EliteBook 830 G5/ HP EliteBook 836 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook 840 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook 840 G5 HC/HP EliteBook 846 G5 HC
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook 840 G5/HP EliteBook 846 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook 840/740 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP EliteBook 840r G4/HP EliteBook 846r G4
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook 850 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook 850 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook 850/750 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP EliteBook Folio 1030 G1
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook Folio G1
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP EliteBook x360 1020 G2
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP EliteBook x360 1030 G2
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP EliteBook x360 1030 G3
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP EliteBook x360 1040 G5
|
12.37.1.102.D.5
|
SP95290
| |
|
HP EliteDesk 705 G4 DM
|
8.65.281.1.A.1
|
SP95167
| |
|
HP EliteDesk 705 G4 MT
|
8.65.281.1.A.1
|
SP95167
| |
|
HP EliteDesk 705 G4 SFF
|
8.65.281.1.A.1
|
SP95167
| |
|
HP EliteDesk 705 G4 Workstation Edition
|
8.65.281.1.A.1
|
SP95167
| |
|
HP EliteDesk 705 G4 Workstation Edition
|
8.65.281.1.A.1
|
SP95167
| |
|
HP EliteDesk 800 G3 DM (Q270 - 35W/65W)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP EliteDesk 800 G3 MT (Q270)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP EliteDesk 800 G3 SFF (Q270)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP EliteDesk 800 G4 DM
|
8.65.281.1.A.1
|
SP95167
| |
|
HP EliteDesk 800 G4 MT
|
8.65.281.1.A.1
|
SP95167
| |
|
HP EliteDesk 800 G4 SFF
|
8.65.281.1.A.1
|
SP95167
| |
|
HP EliteOne 1000 G1
|
8.65.218.56.A.1
|
SP95025
| |
|
HP EliteOne 1000 G2 AiO
|
8.65.283.1.A.1
|
SP95174
| |
|
HP EliteOne 600 G2 AIO
|
8.65.220.60.A.1
|
SP94997
| |
|
HP EliteOne 705 G2 AIO
|
8.65.220.60.A.1
|
SP94997
| |
|
HP EliteOne 800 G2 AIO
|
8.65.220.60.A.1
|
SP94997
| |
|
HP EliteOne 800 G2 AIO
|
8.65.220.60.A.1
|
SP94997
| |
|
HP EliteOne 800 G3 AIO (Q270)
|
8.65.220.60.A.1
|
SP94997
| |
|
HP EliteOne 800 G4 AIO
|
8.65.283.1.A.1
|
SP95174
| |
|
HP EliteOne 800 G4 AIO
|
8.65.283.1.A.1
|
SP95174
| |
|
HP ElitePOS Mobile
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP Engage Flex Pro Retail System
|
8.65.296.1.A.1
|
SP94979
| |
|
HP Engage Flex Pro Retail System
|
8.65.296.1.A.2
|
SP95168
| |
|
HP Engage Flex Pro-C Retail System
|
8.65.296.1.A.1
|
SP94979
| |
|
HP Engage Flex Pro-C Retail System
|
8.65.296.1.A.2
|
SP95168
| |
|
HP MP9 G4 Retail System
|
8.65.281.1.A.1
|
SP95167
| |
|
HP Pro x2 612 G2/ HP Pro x2 612 G2 Tablet with Collaboration Keyboard G2/HP Pro x2 612 G2 Tablet/ HP HP Retail Case 12
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ProBook 11 G2 (Win 7/8.1)
|
9.0.142.1.A.11
|
SP94963
| |
|
HP ProBook 11 G2 (Win10)
|
9.0.142.1.A.11
|
SP94963
| |
|
HP ProBook 430 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP ProBook 430 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ProBook 430 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP ProBook 440 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP ProBook 440 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ProBook 440 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP ProBook 450 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP ProBook 450 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ProBook 450 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP ProBook 455 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP ProBook 455 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ProBook 455 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP ProBook 470 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP ProBook 470 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ProBook 470 G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP Probook 640 G2
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP Probook 640 G3
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ProBook 640 G4
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP Probook 645 G3
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP Probook 645 G3
|
11.27.3690.134.Q.57 (Win7)
|
SP95008
| |
|
HP ProBook 645 G4
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP Probook 650 G2
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP Probook 650 G2
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP Probook 650 G3
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP Probook 650 G3
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ProBook 650 G4
|
12.37.0.102.Q.5
|
SP95069
| |
|
HP ProBook 650 G4
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP Probook 655 G3
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP Probook 655 G3
|
11.27.3690.134.Q.57 (Win7)
|
SP95008
| |
|
HP ProBook x360 11 G1 EE
|
8.65.303.50
|
SP98473
| |
|
HP Probook x360 440 G1
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP ProDesk 400 G3 DM (H270 - 35W)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP ProDesk 400 G4 Desktop Mini PC
|
8.65.281.1.A.1
|
SP95167
| |
|
HP ProDesk 400 G4 MT (H270)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP ProDesk 400 G4 SFF (H270)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP ProDesk 400 G5 Microtower PC
|
8.65.281.1.A.1
|
SP95167
| |
|
HP ProDesk 400 G5 Small Form Factor PC
|
8.65.281.1.A.1
|
SP95167
| |
|
HP ProDesk 480 G4 MT (H270)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP ProDesk 480 G5 Microtower PC
|
8.65.281.1.A.1(DCH)
|
SP95167
| |
|
HP ProDesk 600 G3 DM (Q270 - 35W)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP ProDesk 600 G3 MT (Q270)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP ProDesk 600 G3 SFF (Q270)
|
8.65.276.57.A.1
|
SP94983
| |
|
HP ProDesk 600 G4 DM
|
8.65.281.1.A.1
|
SP95167
| |
|
HP ProDesk 600 G4 Microtower PC
|
8.65.281.1.A.1
|
SP95167
| |
|
HP ProDesk 600 G4 Microtower PC (with PCI slot)
|
8.65.281.1.A.1
|
SP95167
| |
|
HP ProDesk 600 G4 Small Form Factor PC
|
8.65.281.1.A.1
|
SP95167
| |
|
HP ProDesk 680 G4 MT
|
8.65.296.1.A.2
|
SP95168
| |
|
HP ProOne 400 G3
|
8.65.214.56.A.1
|
SP95042
| |
|
HP ProOne 400 G4 20-inch Non-Touch All-in-One Business PC
|
8.65.283.1.A.1
|
SP95174
| |
|
HP ProOne 400 G4 23.8-inch Non-Touch All-in-One Business PC
|
8.65.283.1.A.1
|
SP95174
| |
|
HP ProOne 440 G4 23.8-inch Non-Touch All-in-One Business PC
|
8.65.283.1.A.1
|
SP95174
| |
|
HP ProOne 600 G3
|
8.65.214.56.A.1
|
SP95042
| |
|
HP ProOne 600 G4 AIO
|
8.65.283.1.A.1 (DCH)
|
SP95174
| |
|
HP RP9 G1 AiO Retail System
|
8.65.220.60.A.1
|
SP94997
| |
|
HP Spectre Pro 13 G1
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP Spectre Pro 13 G1
|
11.27.3690.134.Q.57 (Win7)
|
SP95008
| |
|
HP ZBook 14u G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ZBook 14u G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP Zbook 14X2
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP Zbook 15 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP Zbook 15 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ZBook 15 G5
|
12.37.0.102.Q.5
|
SP95069
| |
|
HP Zbook 15u G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP Zbook 15u G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ZBook 15u G5
|
12.37.1.102.Q.5
|
SP95015
| |
|
HP Zbook 17 G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP Zbook 17 G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ZBook 17 G5
|
12.37.0.102.Q.5
|
SP95069
| |
|
HP Zbook Studio G3
|
10.0.3690.118.Q.50
|
SP94989
| |
|
HP ZBook Studio G4
|
11.27.3690.134.Q.5
|
SP95006
| |
|
HP ZBook Studio G5
|
12.37.0.102.Q.5
|
SP95069
| |
|
HP ZHAN 66 Pro G1
|
12.37.1.102.Q.5
|
SP95015
|
Immersive PCs
|
Product Name
|
Updated Version
|
SoftPaq #
|
SoftPaq Link
|
|
Sprout Pro by HP G2
|
8.65.244.1
|
SP95586
|
Consumer PCs
|
Product Name
|
Updated Version
|
SoftPaq #
|
SoftPaq Link
|
|
HP ENVY 15-as000 ~ 15-as099
|
8.65.169.2
|
SP95438
| |
|
HP ENVY 15-as100 ~ 15-as199
|
9.0.160.51
|
SP95439
| |
|
HP ENVY 15t-as000
|
8.65.169.2
|
SP95438
| |
|
HP ENVY 15t-as100
|
9.0.160.51
|
SP95439
| |
|
HP ENVY 17t-u0000
|
8.65.142.52
|
SP95437
| |
|
HP ENVY 17t-u100
|
9.0.160.51
|
SP95439
| |
|
HP ENVY 17t-u200
|
9.0.160.51
|
SP95439
| |
|
HP ENVY 17-u000 ~ 17-u099
|
8.65.142.52
|
SP95437
| |
|
HP ENVY 17-u100 ~ 17-u199
|
9.0.160.51
|
SP95439
| |
|
HP ENVY 17-u200 ~ 17-u299
|
9.0.160.51
|
SP95439
| |
|
HP ENVY 24/ 27 AiO
|
8.65.131.52-2.105.0.0_RS5
|
SP95520
| |
|
HP ENVY Desktop PC
|
8.65.282.51
|
SP95387
| |
|
HP ENVY m6-aq0XX
|
8.65.165.11
|
SP95159
| |
|
HP ENVY m6-aq1XX
|
9.0.160.50
|
SP95182
| |
|
HP ENVY m7-u000 ~ m7-u099
|
8.65.142.52
|
SP95437
| |
|
HP ENVY m7-u100 ~ m7-u199
|
9.0.160.51
|
SP95439
| |
|
HP ENVY x360 13-y0XX
|
9.0.160.0
|
SP84610
| |
|
HP ENVY x360 15-aq0XX,
|
8.65.165.11
|
SP95159
| |
|
HP ENVY x360 15-aq1XX
|
9.0.160.50
|
SP95182
| |
|
HP ENVY x360 15-aq2XX,
|
9.0.160.50
|
SP95182
| |
|
HP ENVY x360 15t-aq0xx
|
8.65.165.11
|
SP95159
| |
|
HP ENVY X360 15t-aq1xx
|
9.0.160.50
|
SP95182
| |
|
HP ENVY x360 15t-aq2xx
|
9.0.160.50
|
SP95182
| |
|
HP Spectre 13-v000 ~ 13-v099
|
8.65.203.5
|
SP95214
| |
|
HP Spectre 13-v100 ~ 13-v199
|
9.0.134.3
|
SP95215
|
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, visit
https://www.hp.com/go/contacthp to learn about your HP support options.
Report: To report a potential security vulnerability with any HP supported product, send email to:
hp-security-alert@hp.com.
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via email, visit
https://www.hp.com/go/alerts.
Security Bulletin Archive: To view released Security Bulletins, search the
HP Support Site for "security bulletin".
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
|
PI
|
HP Printing and Imaging
|
|
HF
|
HP Hardware and Firmware
|
|
GN
|
HP General Software
|
It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.
To get the security-alert PGP key, please send an e-mail message as follows:
Subject: get key
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.
"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin. HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action. HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin. To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."
REVISION HISTORY :
Version: 1 - 15 April 2019 Initial release. Version: 2 – 30 October 2019 SoftPaq updates.
© Copyright 2023 HP Development Company, L.P.
HP Inc. shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. HP Inc. and the names of HP products referenced herein are trademarks of HP Inc. in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.
Enter a topic to search our knowledge library
What can we help you with?
Need Help?