PT-2019-17820 · Nvidia · Nvidia Windows Gpu Display Driver

Publicado 2019-11-09 · Atualizado 2022-01-01 · CVE-2019-5694

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, R390 driver version

Description The issue arises from the incorrect loading of Windows system DLLs by the NVIDIA Control Panel without proper validation of the path or signature, making it susceptible to a binary planting or DLL preloading attack. This could potentially lead to denial of service or information disclosure through code execution, provided the attacker has local system access.

Recommendations For R390 driver version, update to a version that addresses the DLL loading issue to prevent potential code execution and information disclosure. As a temporary workaround, consider restricting local system access to minimize the risk of exploitation.

Exploit

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-5694

Produtos afetados

Nvidia Windows Gpu Display Driver

Referências · 3

• 🔥 https://safebreach.com/Post/NVIDIA-GPU-Display-Drivers-for-Windows-and-GFE-Software-DLL-Preloading-and-Potential-Abuses-CVE-2019-5694-CVE-2019-5695 · Exploit
• https://nvidia.custhelp.com/app/answers/detail/a_id/4907 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5694 · Nota de Segurança