CVE-2015-7866

High

Description

Unquoted Windows search path vulnerability in the Smart Maximize Helper (nvSmartMaxApp.exe) in the Control Panel in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to gain privileges via a Trojan horse application, as demonstrated by C:\Program.exe.

SeverityHigh

CVSS7.2

Exploit probability—

ProductNvidia Gpu Driver

PublishedNov 24, 2015

First seenNov 24, 2015

How to fix

Update

nvidia gpu_driver341.92, 354.35, 358.87 or later

Vendor advisories

h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867

Affected products

Product	Affected versions	Fixed in
nvidia gpu_driver	340 ≤ v < 341.92, 352 ≤ v < 354.35, 358 ≤ v < 358.87	341.92, 354.35, 358.87

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.