What is the severity of CVE-2015-1170?

CVE-2015-1170 is considered a high severity vulnerability due to its potential to allow local users to gain administrator privileges.

How do I fix CVE-2015-1170?

To fix CVE-2015-1170, upgrade the NVIDIA Display Driver to a version that is not vulnerable, specifically R304 version 309.08 or later, R340 version 341.44 or later, R343 version 345.20 or later, or R346 version 347.52 or later.

What type of attack does CVE-2015-1170 allow?

CVE-2015-1170 allows local users to execute unspecified API calls that can escalate their privileges to that of an administrator.

Is CVE-2015-1170 easy to exploit?

While the difficulty of exploitation may vary, the vulnerability enables local privilege escalation, making it a serious concern for affected systems.

Vulnerability/
CVE-2015-1170

high

7.2

CWE

264

6/3/2015

6/8/2024

CVE-2015-1170

Q: Who is affected by CVE-2015-1170?

Users of NVIDIA Display Driver versions R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 are affected by CVE-2015-1170.

First published: Fri Mar 06 2015(Updated: )

The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Nvidia Gpu Driver R304	<=309.07
Nvidia Gpu Driver R340	<=341.43
Nvidia Gpu Driver R343	<=345.19
Nvidia Gpu Driver R346	<=347.51

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2015-1170?
CVE-2015-1170 is considered a high severity vulnerability due to its potential to allow local users to gain administrator privileges.
How do I fix CVE-2015-1170?
To fix CVE-2015-1170, upgrade the NVIDIA Display Driver to a version that is not vulnerable, specifically R304 version 309.08 or later, R340 version 341.44 or later, R343 version 345.20 or later, or R346 version 347.52 or later.
Who is affected by CVE-2015-1170?
Users of NVIDIA Display Driver versions R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 are affected by CVE-2015-1170.
What type of attack does CVE-2015-1170 allow?
CVE-2015-1170 allows local users to execute unspecified API calls that can escalate their privileges to that of an administrator.
Is CVE-2015-1170 easy to exploit?
While the difficulty of exploitation may vary, the vulnerability enables local privilege escalation, making it a serious concern for affected systems.

collector/nvd-index
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/author
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/tags
agent/source
vendor/nvidia
canonical/nvidia gpu driver r304
version/nvidia gpu driver r304/309.07
canonical/nvidia gpu driver r340
version/nvidia gpu driver r340/341.43
canonical/nvidia gpu driver r343
version/nvidia gpu driver r343/345.19
canonical/nvidia gpu driver r346
version/nvidia gpu driver r346/347.51

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2015-1170?
CVE-2015-1170 is considered a high severity vulnerability due to its potential to allow local users to gain administrator privileges.
How do I fix CVE-2015-1170?
To fix CVE-2015-1170, upgrade the NVIDIA Display Driver to a version that is not vulnerable, specifically R304 version 309.08 or later, R340 version 341.44 or later, R343 version 345.20 or later, or R346 version 347.52 or later.
Who is affected by CVE-2015-1170?
Users of NVIDIA Display Driver versions R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 are affected by CVE-2015-1170.
What type of attack does CVE-2015-1170 allow?
CVE-2015-1170 allows local users to execute unspecified API calls that can escalate their privileges to that of an administrator.
Is CVE-2015-1170 easy to exploit?
While the difficulty of exploitation may vary, the vulnerability enables local privilege escalation, making it a serious concern for affected systems.