PT-2013-2104 · Nvidia · Nvidia Stereoscopic 3D Driver

Publicado 2013-04-08 · Atualizado 2013-04-09 · CVE-2013-0110

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Stereoscopic 3D Driver versions prior to 307.78 NVIDIA Stereoscopic 3D Driver Release 310 versions prior to 311.00

Description The issue is related to the nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service. It lacks double quote characters in the service path, allowing local users to gain privileges via a Trojan horse program.

Recommendations For NVIDIA Stereoscopic 3D Driver versions prior to 307.78, update to version 307.78 or later. For NVIDIA Stereoscopic 3D Driver Release 310 versions prior to 311.00, update to version 311.00 or later.

Correção

Identificadores relacionados

CVE-2013-0110

Produtos afetados

Nvidia Stereoscopic 3D Driver

Referências · 3

• http://kb.cert.org/vuls/id/957036 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0110 · Nota de Segurança
• http://nvidia.com/object/product-security.html · Aviso do Fabricante