PT-2013-2105 · Nvidia · Nvidia Update Service Daemon+1

Publicado 2013-04-08 · Atualizado 2013-04-09 · CVE-2013-0111

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA driver versions prior to 307.78 NVIDIA Release 310 versions prior to 311.00

Description The issue is related to the daemonu.exe, also known as the NVIDIA Update Service Daemon, which lacks double quote characters in the service path. This allows local users to gain privileges via a Trojan horse program.

Recommendations For NVIDIA driver versions prior to 307.78, update to version 307.78 or later. For NVIDIA Release 310 versions prior to 311.00, update to version 311.00 or later.

Correção

Identificadores relacionados

CVE-2013-0111

Produtos afetados

Nvidia Update Service Daemon

Nvidia Driver

Referências · 3

• http://kb.cert.org/vuls/id/957036 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0111 · Nota de Segurança
• http://nvidia.com/object/product-security.html · Aviso do Fabricante