PT-2016-6717 · Microsoft+1 · Windows+5

Alin Ghica · Publicado 2016-11-08 · Atualizado 2016-12-15 · CVE-2016-5852

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Quadro, NVS, and GeForce products (affected versions not specified)

Description The issue concerns unquoted service path vulnerabilities in Windows, specifically affecting GFE GameStream and NVTray Plugin. A successful exploit can enable malicious code to execute on the system at the system or user privilege level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2016-5852

Produtos afetados

Gfe Gamestream

Nvidia Geforce

Nvidia Nvs

Nvidia Quadro

Nvtray Plugin

Windows

Referências · 5

• http://nvidia.custhelp.com/app/answers/detail/a_id/4213 · Aviso do Fabricante
• http://securityfocus.com/bid/93251 · Nota
• https://osv.dev/vulnerability/CVE-2016-5852 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5852 · Nota de Segurança
• https://support.lenovo.com/us/en/product_security/ps500070 · Nota