CVE-2015-1170
First published: Fri Mar 06 2015(Updated: )
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nvidia GPU Driver | <=309.07 | |
| Nvidia GPU Driver | <=341.43 | |
| Nvidia GPU Driver | <=345.19 | |
| Nvidia GPU Driver | <=347.51 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://marc.info/?l=bugtraq&m=142781493222653&w=2
- http://marc.info/?l=bugtraq&m=143013598825091&w=2
- http://nvidia.custhelp.com/app/answers/detail/a_id/3634
- http://www.securitytracker.com/id/1032013
- https://support.lenovo.com/product_security/nvidia_windows_privilege
- https://support.lenovo.com/us/en/product_security/nvidia_windows_privilege
Frequently Asked Questions
What is the severity of CVE-2015-1170?
CVE-2015-1170 is considered a high severity vulnerability due to its potential to allow local users to gain administrator privileges.
How do I fix CVE-2015-1170?
To fix CVE-2015-1170, upgrade the NVIDIA Display Driver to a version that is not vulnerable, specifically R304 version 309.08 or later, R340 version 341.44 or later, R343 version 345.20 or later, or R346 version 347.52 or later.
Who is affected by CVE-2015-1170?
Users of NVIDIA Display Driver versions R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 are affected by CVE-2015-1170.
What type of attack does CVE-2015-1170 allow?
CVE-2015-1170 allows local users to execute unspecified API calls that can escalate their privileges to that of an administrator.
Is CVE-2015-1170 easy to exploit?
While the difficulty of exploitation may vary, the vulnerability enables local privilege escalation, making it a serious concern for affected systems.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/nvidia
- canonical/nvidia gpu driver
- version/nvidia gpu driver/309.07
- version/nvidia gpu driver/341.43
- version/nvidia gpu driver/345.19
- version/nvidia gpu driver/347.51