CVE-2015-1170

2015-03-0623:59:00

CWE-264

[email protected]

web.nvd.nist.gov

nvidia display driver

cve-2015-1170

security

privilege escalation

vulnerability

api calls

6.6 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a “kernel administrator check,” which allows local users to gain administrator privileges via unspecified API calls.

CPENameOperatorVersion
nvidia:gpu_driver_r304nvidia gpu driver r304le309.07
nvidia:gpu_driver_r346nvidia gpu driver r346le347.51
nvidia:gpu_driver_r340nvidia gpu driver r340le341.43
nvidia:gpu_driver_r343nvidia gpu driver r343le345.19

CPE	Name	Operator	Version
nvidia:gpu_driver_r304	nvidia gpu driver r304	le	309.07
nvidia:gpu_driver_r346	nvidia gpu driver r346	le	347.51
nvidia:gpu_driver_r340	nvidia gpu driver r340	le	341.43
nvidia:gpu_driver_r343	nvidia gpu driver r343	le	345.19