CVE-2015-5465

Related Files

SiS Windows VGA Display Manager Privilege Escalation

Posted Sep 2, 2015

Authored by Matthew Bergin

Vulnerabilities within the srvkp module allows an attacker to inject memory they control into an arbitrary location they define or cause memory corruption. IOCTL request codes 0x96002400 and 0x96002404 have been demonstrated to trigger these vulnerabilities. These vulnerabilities can be used to obtain control of code flow in a privileged process and ultimately be used to escalate the privilege of an attacker. Version affected is 6.14.10.3930.

tags | advisory, arbitrary, vulnerability

advisories | CVE-2015-5465

SHA-256 | a2a0c9af7028c25243f0a56d26ca9915265d443f37f6c6fd0844ddb64354f2ce

Download | Favorite | View