Description
The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill".
References (4)
Core 4
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/26448
Various Sources x_refsource_misc
http://blogs.zdnet.com/security/?p=438
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/25265
Various Sources x_refsource_misc
http://blogs.zdnet.com/security/?p=427
Scores
EPSS
0.0005
EPSS Percentile
15.3%
Details
CWE
CWE-264
Status
published
Products (2)
amd/catalyst_driver
ati/catalyst_driver
Published
Aug 13, 2007
Tracked Since
Feb 18, 2026