Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-1170
HistoryMar 06, 2015 - 12:00 a.m.

CVE-2015-1170

2015-03-0600:00:00
ubuntu.com
ubuntu.com
5

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343
before 345.20, and R346 before 347.52 does not properly validate local
client impersonation levels when performing a “kernel administrator check,”
which allows local users to gain administrator privileges via unspecified
API calls.

Notes

Author Note
seth-arnold appears to be windows-specific

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

Related for UB:CVE-2015-1170