CVE-2015-7724

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE: This vulnerability exists due to an incomplete fix for CVE-2015-7723.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/134120/AMD-fglrx-driver-15.7-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2015/Oct/103Mailing List, Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/536782/100/0/threaded
http://www.securityfocus.com/bid/77361Third Party Advisory, VDB Entry
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-7724/Exploit, Third Party Advisory
http://packetstormsecurity.com/files/134120/AMD-fglrx-driver-15.7-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2015/Oct/103Mailing List, Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/536782/100/0/threaded
http://www.securityfocus.com/bid/77361Third Party Advisory, VDB Entry
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-7724/Exploit, Third Party Advisory

Timeline

Published: Jun 7, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-77256.5Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticat CVE-2015-77263.5Cross-site scripting (XSS) vulnerability in role deletion in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow CVE-2015-77276.5Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allow remote a CVE-2015-77283.5Cross-site scripting (XSS) vulnerability in user creation in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 (NewDB100_CVE-2015-77296.5Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote CVE-2015-773010.0SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial CVE-2015-77315.5SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP S CVE-2015-77327.5The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext.CVE-2015-77405.5Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of CVE-2015-77436.5XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files CVE-2015-77445.9wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allo CVE-2015-77469.8NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive informat