NVD

Id
28286  
Name
CVE-2015-7865  
Description
nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows does not properly restrict access to the stereosvrpipe named pipe, which allows local users to gain privileges via a commandline in a number 2 command, which is stored in the HKEY_LOCAL_MACHINE explorer Run registry key, a different vulnerability than CVE-2011-4784.  
Reject
 
CVSS Version
2  
CVSS Score
7.7  
Severity
High  
CVSS Base Score
7.7  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
5.1  
CVSS Vector
(AV:A/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-11-24  
Modified Date
2016-12-07  
Seq
2015-7865  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
148664 28286 CVE-2015-7865 http://nvidia.custhelp.com/app/answers/detail/a_id/3807/kw/security  View
148665 28286 CVE-2015-7865 http://packetstormsecurity.com/files/134520/NVIDIA-Stereoscopic-3D-Driver-Service-Arbitrary-Run-Key-Creation.html  View
148666 28286 CVE-2015-7865 1034173  View
148667 28286 CVE-2015-7865 https://code.google.com/p/google-security-research/issues/detail?id=515  View
148668 28286 CVE-2015-7865 HPSBHF03545  View
148669 28286 CVE-2015-7865 38792  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10700 JVNDB-2015-006020 Windows 上で稼動する NVIDIA GPU グラフィックスドライバの Stereoscopic 3D ドライバサービスにおける権限を取得される脆弱性 Windows 上で稼動する NVIDIA GPU グラフィックスドライバの Stereoscopic 3D ドライバサービスの nvSCPAPISvr.exe は、stereosvrpipe 名前付きパイプへのアクセスを適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2015-7865 85090 CVE-2015-7865 28286 7.7 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006020.html 2015-11-13 2015-11-26 View