CVE-2007-4315

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-13 · updated 2026-06-16
Weakness: CWE-264

Description

The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill".

Affected products

AMD Catalyst Driver: all versions
Ati Catalyst Driver: all versions

References

http://blogs.zdnet.com/security/?p=427
http://blogs.zdnet.com/security/?p=438
http://secunia.com/advisories/26448
http://www.securityfocus.com/bid/25265
http://blogs.zdnet.com/security/?p=427
http://blogs.zdnet.com/security/?p=438
http://secunia.com/advisories/26448
http://www.securityfocus.com/bid/25265

Get alerted when CVE-2007-4315 or the next vulnerability affects your stack