CVE-2015-5466

Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.1090 allows local users to gain privileges via a crafted 0x96002404 IOCTL call.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.13% chance of exploitation in the next 30 days, 64th percentile

Published

2020-01-15

Updated

2024-08-06

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/133400/XGI-Windows-VGA-Display-Manager-Privilege-Esc…
• http://seclists.org/fulldisclosure/2015/Sep/2
• https://www.korelogic.com/Resources/Advisories/KL-001-2015-004.txt

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/38055

References

• CVE Record
• NVD entry

Related

• CVE-2015-5465
• CVE-2015-5468
• CVE-2015-5461
• CVE-2015-5469
• CVE-2015-5460
• CVE-2015-5471