CVE-2015-1170
High
Description
The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.
SeverityHigh
CVSS7.2
Exploit probability—
ProductNvidia Gpu Driver
PublishedMar 6, 2015
First seenMar 6, 2015
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia gpu_driver_r304 | v ≤ 309.07 | — |
| nvidia gpu_driver_r340 | v ≤ 341.43 | — |
| nvidia gpu_driver_r343 | v ≤ 345.19 | — |
| nvidia gpu_driver_r346 | v ≤ 347.51 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.