QwikSec

Security Database

CVE

CWE

Training

CVE-2015-7865

Published: Nov 24, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows does not properly restrict access to the stereosvrpipe named pipe, which allows local users to gain privileges via a commandline in a number 2 command, which is stored in the HKEY_LOCAL_MACHINE explorer Run registry key, a different vulnerability than CVE-2011-4784.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_SECTRACK

http://packetstormsecurity.com/files/134520/NVIDIA-Stereoscopic-3D-Driver-Service-Arbitrary-Run-Key-Creation.html

x_refsource_MISC

vendor-advisory

x_refsource_HP

exploit

x_refsource_EXPLOIT-DB

https://code.google.com/p/google-security-research/issues/detail?id=515

x_refsource_MISC

http://nvidia.custhelp.com/app/answers/detail/a_id/3807/kw/security

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.