CVE-2015-1170
Severity Score
7.2
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.
NVIDIA Display Driver R304 anterior a 309.08, R340 anterior a 341.44, R343 anterior a 345.20, y R346 anterior a 347.52 no valida correctamente los niveles de suplantación de clientes locales cuando realiza la 'comprobación del administrador del kernel,' lo que permite a usuarios locales ganar privilegios de administrador a través de llamadas a la API no especificadas.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-01-17 CVE Reserved
- 2015-03-06 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1032013 | Vdb Entry | |
| https://support.lenovo.com/product_security/nvidia_windows_privilege | X_refsource_confirm | |
| https://support.lenovo.com/us/en/product_security/nvidia_windows_privilege | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://marc.info/?l=bugtraq&m=142781493222653&w=2 | 2016-12-08 | |
| http://marc.info/?l=bugtraq&m=143013598825091&w=2 | 2016-12-08 | |
| http://nvidia.custhelp.com/app/answers/detail/a_id/3634 | 2016-12-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Nvidia Search vendor "Nvidia" | Gpu Driver R304 Search vendor "Nvidia" for product "Gpu Driver R304" | <= 309.07 Search vendor "Nvidia" for product "Gpu Driver R304" and version " <= 309.07" | - |
Affected
| ||||||
| Nvidia Search vendor "Nvidia" | Gpu Driver R340 Search vendor "Nvidia" for product "Gpu Driver R340" | <= 341.43 Search vendor "Nvidia" for product "Gpu Driver R340" and version " <= 341.43" | - |
Affected
| ||||||
| Nvidia Search vendor "Nvidia" | Gpu Driver R343 Search vendor "Nvidia" for product "Gpu Driver R343" | <= 345.19 Search vendor "Nvidia" for product "Gpu Driver R343" and version " <= 345.19" | - |
Affected
| ||||||
| Nvidia Search vendor "Nvidia" | Gpu Driver R346 Search vendor "Nvidia" for product "Gpu Driver R346" | <= 347.51 Search vendor "Nvidia" for product "Gpu Driver R346" and version " <= 347.51" | - |
Affected
| ||||||