PT-2017-10519 · Nvidia · Nvidia Geforce Experience

Tim Harrison · Publicado 2017-10-16 · Atualizado 2019-11-07 · CVE-2017-0316

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.10.0.55

Description The issue arises from a lack of validation of a value passed from a user to the driver in the NVISystemService64 component of the NVIDIA Installer Framework. This could potentially lead to a denial of service or possible escalation of privileges.

Recommendations For versions prior to 3.10.0.55, update to version 3.10.0.55 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-0316

Produtos afetados

Nvidia Geforce Experience

Referências · 3

• http://nvidia.custhelp.com/app/answers/detail/a_id/4560 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-0316 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-0316 · Nota de Segurança