PT-2017-16969 · Nvidia · Nvidia Windows Gpu Display Driver

Publicado 2017-09-22 · Atualizado 2017-09-28 · CVE-2017-6270

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver (affected versions not specified)

Description The issue arises from a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation, where untrusted user input is used as a divisor without validation during a calculation. This may lead to a potential divide by zero, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Divide By Zero

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

CVE-2017-6270

Produtos afetados

Nvidia Windows Gpu Display Driver

Referências · 3

• http://securityfocus.com/bid/101002 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6270 · Nota de Segurança
• http://nvidia.custhelp.com/app/answers/detail/a_id/4544 · Aviso do Fabricante