PT-2015-6929 · Silicon Integrated Systems · Silicon Integrated Systems Windowsxp Display Manager

Matt Bergin · Publicado 2015-09-16 · Atualizado 2018-10-09 · CVE-2015-5465

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Silicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display Manager) version 6.14.10.3930

Description The issue allows local users to gain privileges through crafted IOCTL calls, specifically (1) 0x96002400 or (2) 0x96002404.

Recommendations For version 6.14.10.3930, consider restricting access to the IOCTL calls 0x96002400 and 0x96002404 to prevent privilege escalation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2015-5465

Produtos afetados

Silicon Integrated Systems Windowsxp Display Manager

Referências · 6

• 🔥 https://exploit-db.com/exploits/38054 · Exploit
• 🔥 http://packetstormsecurity.com/files/133399/SiS-Windows-VGA-Display-Manager-Privilege-Escalation.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2015/Sep/1 · Exploit
• 🔥 https://korelogic.com/Resources/Advisories/KL-001-2015-003.txt · Exploit
• http://securityfocus.com/archive/1/536370/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5465 · Nota de Segurança