PT-2018-1934 · Nvidia · Nvidia Geforce Experience

Publicado 2018-11-19 · Atualizado 2019-10-03 · CVE-2018-6263

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.16

Description The issue is caused by errors in privilege management, allowing an attacker with access to a local user account to potentially escalate privileges by planting a malicious dynamic link library (DLL) during application installation.

Recommendations For versions prior to 3.16, update to version 3.16 or later to resolve the issue.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

BDU:2018-01541

CVE-2018-6263

Produtos afetados

Nvidia Geforce Experience

Referências · 6

• https://securitylab.ru/vulnerability/496622.php · Nota
• https://nvidia.custhelp.com/app/answers/detail/a_id/4740 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6263 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-01541 · Nota de Segurança
• https://support.lenovo.com/us/en/product_security/LEN-25444 · Nota
• https://osv.dev/vulnerability/CVE-2018-6263 · Aviso do Fabricante