PT-2019-17827 · Nvidia+1 · Nvidia Geforce Experience+1

Publicado 2019-11-09 · Atualizado 2022-01-01 · CVE-2019-5701

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.20.0.118

Description The issue arises when GameStream is enabled, allowing an attacker with local system access to load Intel graphics driver DLLs without validating the path or signature, which can lead to denial of service, information disclosure, or escalation of privileges through code execution.

Recommendations For versions prior to 3.20.0.118, update to version 3.20.0.118 or later to resolve the issue. As a temporary workaround, consider disabling GameStream until a patch is available. Restrict access to the Intel graphics driver DLLs to minimize the risk of exploitation.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-5701

Produtos afetados

Intel Graphics Driver

Nvidia Geforce Experience

Referências · 4

• https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-011.md · Nota
• https://nvidia.custhelp.com/app/answers/detail/a_id/4860 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-5701 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5701 · Nota de Segurança