CVE-2007-4315

The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill".

CVSS v2.0 6.9 MEDIUM

6.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 3.4 / Impact : 10.0

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://blogs.zdnet.com/security/?p=427
http://blogs.zdnet.com/security/?p=438
http://secunia.com/advisories/26448
http://www.securityfocus.com/bid/25265

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:amd:catalyst_driver::::::::
	cpe:2.3:a:ati:catalyst_driver::::::::

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-08-13 21:17

Updated : 2024-02-04 17:13

NVD link : CVE-2007-4315

Mitre link : CVE-2007-4315

CVE.ORG link : CVE-2007-4315

JSON object : View

Products Affected

ati

catalyst_driver

amd

catalyst_driver

microsoft

windows_vista

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2007-4315", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": true, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-08-13T21:17:00.000", "references": [{"url": "http://blogs.zdnet.com/security/?p=427", "source": "cve@mitre.org"}, {"url": "http://blogs.zdnet.com/security/?p=438", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26448", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25265", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by \"Purple Pill\"."}, {"lang": "es", "value": "El controlador AMD ATI atidsmxx.sys 3.0.502.0 en Windows Vista permite a usuarios locales evitar la pol\u00edtica de firma del controlador, escribir en zonas de memoria del n\u00facleo, y de ese modo obtener privilegios mediante vectores no especificados, como ha sido demostrado por \"Purple Pill\"."}], "lastModified": "2012-10-18T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:amd:catalyst_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AC4E5D1-DA07-4907-8AC7-05764322C414"}, {"criteria": "cpe:2.3:a:ati:catalyst_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62E822DD-6123-4CD8-9FE4-BC8A91D94F80"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}