« Volver al listado

CVE-2015-1170

Estado: ModificadaAlta (7.2)—

The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Nvidia — GPU Driver R304Nvidia — GPU Driver R340Nvidia — GPU Driver R343Nvidia — GPU Driver R346

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-1170",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-03-06T23:59:02.263",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=142781493222653&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=143013598825091&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3634",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1032013",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.lenovo.com/product_security/nvidia_windows_privilege",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.lenovo.com/us/en/product_security/nvidia_windows_privilege",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=142781493222653&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=143013598825091&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/3634",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032013",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.lenovo.com/product_security/nvidia_windows_privilege",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.lenovo.com/us/en/product_security/nvidia_windows_privilege",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a \"kernel administrator check,\" which allows local users to gain administrator privileges via unspecified API calls."
    },
    {
      "lang": "es",
      "value": "NVIDIA Display Driver R304 anterior a 309.08, R340 anterior a 341.44, R343 anterior a 345.20, y R346 anterior a 347.52 no valida correctamente los niveles de suplantación de clientes locales cuando realiza la 'comprobación del administrador del kernel,' lo que permite a usuarios locales ganar privilegios de administrador a través de llamadas a la API no especificadas."
    }
  ],
  "lastModified": "2026-06-17T00:21:53.820",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_driver_r304:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC74053E-FBF0-4CF9-B2B9-437ABAE34D95",
              "versionEndIncluding": "309.07"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_driver_r340:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25E2781B-1C6F-4943-A88D-9642F4D0E4D3",
              "versionEndIncluding": "341.43"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_driver_r343:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C2353E8-A4E7-47E3-AB0C-6C6B013568A3",
              "versionEndIncluding": "345.19"
            },
            {
              "criteria": "cpe:2.3:a:nvidia:gpu_driver_r346:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B8DEF4C-8089-41FF-9587-C3B8A1329C61",
              "versionEndIncluding": "347.51"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}