Lucene search

K
cveMitreCVE-2015-7866
HistoryNov 24, 2015 - 8:59 p.m.

CVE-2015-7866

2015-11-2420:59:12
mitre
web.nvd.nist.gov
40
cve-2015-7866
unquoted path vulnerability
smart maximize helper
nvidia gpu graphics driver
windows
privilege escalation
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.7

Confidence

High

EPSS

0

Percentile

5.1%

Unquoted Windows search path vulnerability in the Smart Maximize Helper (nvSmartMaxApp.exe) in the Control Panel in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to gain privileges via a Trojan horse application, as demonstrated by C:\Program.exe.

Affected configurations

Nvd
Node
nvidiagpu_driverRange340341.92
OR
nvidiagpu_driverRange352354.35
OR
nvidiagpu_driverRange358358.87
AND
microsoftwindows
VendorProductVersionCPE
nvidiagpu_driver*cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.7

Confidence

High

EPSS

0

Percentile

5.1%