PT-2013-2103 · Microsoft+1 · Windows+1

Publicado 2013-04-08 · Atualizado 2013-04-09 · CVE-2013-0109

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver versions prior to 307.78 NVIDIA Display Driver Release 310 versions prior to 311.00

Description The issue allows local users to gain privileges or cause a denial of service due to improper exception handling by the NVIDIA Display Driver service on Windows. This can be achieved via a crafted application, potentially leading to a memory overwrite.

Recommendations For NVIDIA Display Driver versions prior to 307.78, update to version 307.78 or later. For NVIDIA Display Driver Release 310 versions prior to 311.00, update to version 311.00 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-0109

Produtos afetados

Nvidia Gpu Display Driver

Windows

Referências · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/nvidia_nvsvc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/30393 · Exploit
• http://kb.cert.org/vuls/id/957036 · Nota
• http://nvidia.com/object/product-security.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-0109 · Nota de Segurança