CVE-2015-8328 Detail
Current Description
Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-7869 per ADT2 and ADT3 due to different vulnerability types and affected versions.
Source:
MITRE
View Analysis Description
Analysis Description
Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-7869 per ADT2 and ADT3 due to different vulnerability types and affected versions.
Source:
MITRE
Impact
CVSS v2.0 Severity and Metrics:
Base Score:
6.6 MEDIUM
Vector:
(AV:L/AC:M/Au:N/C:C/I:P/A:C)
(V2 legend)
Impact Subscore:
9.5
Exploitability Subscore:
3.4
Access Vector (AV):
Local
Access Complexity (AC):
Medium
Authentication (AU):
None
Confidentiality (C):
Complete
Integrity (I):
Partial
Availability (A):
Complete
Additional Information:
Allows unauthorized disclosure of information
Allows unauthorized modification
Allows disruption of service
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because
they may have information that would be of interest to you. No inferences should be drawn on account of other sites
being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose.
NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further,
NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about
this page to nvd@nist.gov.
Change History
3 change records found
- show changes
Reanalysis -
2/14/2019 2:25:29 PM
| Action |
Type |
Old Value |
New Value |
| Changed |
CPE Configuration |
Record truncated, showing 500 of 580 characters.
View Entire Change Record
AND
OR
*cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* versions up to (including) 340.96
*cpe:2.3:a:nvidia:gpu_driver:352.09:*:*:*:*:*:*:*
*cpe:2.3:a:nvidia:gpu_driver:352.21:*:*:*:*:*:*:*
*cpe:2.3:a:nvidia:gpu_driver:352.30:*:*:*:*:*:*:*
*cpe:2.3:a:nvidia:gpu_driver:352.41:*:*:*:*:*:*:*
*cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* versions up to (including) 354.13
*cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* versions up to |
AND
OR
*cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* versions from (including) 340 up to (excluding) 341.92
*cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* versions from (including) 352 up to (including) 354.35
*cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:* versions from (including) 358 up to (including) 358.87
OR
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| Changed |
Reference Type |
http://www.securitytracker.com/id/1034176 No Types Assigned |
http://www.securitytracker.com/id/1034176 Third Party Advisory, VDB Entry |
Modified Analysis -
11/25/2015 11:25:13 AM
| Action |
Type |
Old Value |
New Value |
| Added |
CPE Configuration |
|
Record truncated, showing 500 of 609 characters.
View Entire Change Record
Configuration 1
AND
OR
*cpe:2.3:a:nvidia:gpu_driver:358.09:*:*:*:*:*:*:* (and previous)
*cpe:2.3:a:nvidia:gpu_driver:354.13:*:*:*:*:*:*:* (and previous)
*cpe:2.3:a:nvidia:gpu_driver:340.96:*:*:*:*:*:*:* (and previous)
*cpe:2.3:a:nvidia:gpu_driver:352.41:*:*:*:*:*:*:*
*cpe:2.3:a:nvidia:gpu_driver:352.30:*:*:*:*:*:*:*
*cpe:2.3:a:nvidia:gpu_driver:352.21:*:*:*:*:*:*:*
*cpe:2.3:a:n |
| Added |
CVSS V2 |
|
(AV:L/AC:M/Au:N/C:C/I:P/A:C) |
| Added |
CWE |
|
CWE-119 |
| Changed |
Reference Type |
http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security No Types Assigned |
http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security Advisory |
Initial CVE Analysis -
11/25/2015 11:14:09 AM
Quick Info
CVE Dictionary Entry:
CVE-2015-8328
NVD Published Date:
11/24/2015
NVD Last Modified:
02/14/2019
|