PT-2019-17816 · Nvidia · Nvidia Windows Gpu Display Driver

Publicado 2019-11-09 · Atualizado 2020-08-24 · CVE-2019-5690

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions

Description The issue concerns a vulnerability in the kernel mode layer handler for DxgkDdiEscape, specifically within the nvlddmkm.sys module. The problem arises because the size of an input buffer is not properly validated. This lack of validation may lead to a denial of service or potentially allow for escalation of privileges.

Recommendations For all versions, apply the necessary patch or update from NVIDIA to fix the vulnerability in the nvlddmkm.sys handler for DxgkDdiEscape.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-5690

Produtos afetados

Nvidia Windows Gpu Display Driver

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-5690 · Nota de Segurança
• https://nvidia.custhelp.com/app/answers/detail/a_id/4907 · Aviso do Fabricante