PT-2015-6929 · Silicon Integrated Systems · Silicon Integrated Systems Windowsxp Display Manager

Matt Bergin · Published 2015-09-16 · Updated 2018-10-09 · CVE-2015-5465

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Silicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display Manager) version 6.14.10.3930

Description The issue allows local users to gain privileges through crafted IOCTL calls, specifically (1) 0x96002400 or (2) 0x96002404.

Recommendations For version 6.14.10.3930, consider restricting access to the IOCTL calls 0x96002400 and 0x96002404 to prevent privilege escalation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2015-5465

Affected Products

Silicon Integrated Systems Windowsxp Display Manager

References · 6

• 🔥 https://exploit-db.com/exploits/38054 · Exploit
• 🔥 http://packetstormsecurity.com/files/133399/SiS-Windows-VGA-Display-Manager-Privilege-Escalation.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2015/Sep/1 · Exploit
• 🔥 https://korelogic.com/Resources/Advisories/KL-001-2015-003.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-5465 · Security Note
• http://securityfocus.com/archive/1/536370/100/0/threaded · Note