CVEvulnerability
CVE-2015-7866
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-11-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Unquoted Windows search path vulnerability in the Smart Maximize Helper (nvSmartMaxApp.exe) in the Control Panel in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to gain privileges via a Trojan horse application, as demonstrated by C:\Program.exe.
Affected configurations
• nvidia gpu driver (>= 340 < 341.92)
• nvidia gpu driver (>= 352 < 354.35)
• nvidia gpu driver (>= 358 < 358.87)
References
- http://nvidia.custhelp.com/app/answers/detail/a_id/3806/kw/security Vendor Advisory
- http://www.securitytracker.com/id/1034175 Third Party Advisory, VDB Entry
- https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867 Third Party Advisory
- http://nvidia.custhelp.com/app/answers/detail/a_id/3806/kw/security Vendor Advisory
- http://www.securitytracker.com/id/1034175 Third Party Advisory, VDB Entry
- https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867 Third Party Advisory