CVE-2017-8360

Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keystrokes) to any process. In mictray64.exe (mic tray icon) 1.0.0.46, a LowLevelKeyboardProc Windows hook is used to capture keystrokes. This data is leaked via unintended channels: debug messages accessible to any process that is running in the current user session, and filesystem access to C:\Users\Public\MicTray.log by any process.

• CWE-200

• http://www.securitytracker.com/id/1038527
• https://www.modzero.ch/advisories/MZ-17-01-Conexant-Keylogger.txtExploit, Mitigation, Technical Description, Third Party Advisory
• https://www.modzero.ch/modlog/archives/2017/05/11/en_keylogger_in_hewlett-packard_audio_driver/index.htmlExploit, Technical Description, Third Party Advisory
• http://www.securitytracker.com/id/1038527
• https://www.modzero.ch/advisories/MZ-17-01-Conexant-Keylogger.txtExploit, Mitigation, Technical Description, Third Party Advisory
• https://www.modzero.ch/modlog/archives/2017/05/11/en_keylogger_in_hewlett-packard_audio_driver/index.htmlExploit, Technical Description, Third Party Advisory

Published

May 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8354In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c a…
• CVE-2017-8355In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c a…
• CVE-2017-8356In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c a…
• CVE-2017-8357In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c a…
• CVE-2017-8358LibreOffice before 2017-03-17 has an out-of-bounds write cau…
• CVE-2017-8359Google gRPC before 2017-03-29 has an out-of-bounds write cau…
• CVE-2017-8361The flac_buffer_copy function in flac.c in libsndfile 1.0.28…
• CVE-2017-8362The flac_buffer_copy function in flac.c in libsndfile 1.0.28…
• CVE-2017-8363The flac_buffer_copy function in flac.c in libsndfile 1.0.28…
• CVE-2017-8364The read_buf function in stream.c in rzip 2.1 allows remote …
• CVE-2017-8365The i2les_array function in pcm.c in libsndfile 1.0.28 allow…
• CVE-2017-8366The strescape function in ec_strings.c in Ettercap 0.8.2 all…