Lucene search

K
nvd[email protected]NVD:CVE-2015-1170
HistoryMar 06, 2015 - 11:59 p.m.

CVE-2015-1170

2015-03-0623:59:02
CWE-264
web.nvd.nist.gov

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a “kernel administrator check,” which allows local users to gain administrator privileges via unspecified API calls.

Affected configurations

NVD
Node
nvidiagpu_driver_r304Range309.07
OR
nvidiagpu_driver_r340Range341.43
OR
nvidiagpu_driver_r343Range345.19
OR
nvidiagpu_driver_r346Range347.51

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%