PT-2019-2987 · Microsoft+2 · Directx+4
Publicado
2019-02-13
·
Atualizado
2019-08-13
·
CVE-2019-5684
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
NVIDIA Windows GPU Display Driver (all versions)
VMware ESXi, Workstation and Fusion (affected versions not specified)
Description
The issue is related to a vulnerability in DirectX drivers, specifically in the pixel shader functionality, where a specially crafted shader can cause an out of bounds access of an input texture array. This may lead to denial of service or code execution. The vulnerability is also associated with a buffer overflow, allowing an attacker to potentially execute arbitrary code.
Recommendations
For NVIDIA Windows GPU Display Driver, consider disabling the use of specially crafted shaders until a patch is available.
For VMware ESXi, Workstation and Fusion, restrict access to the pixel shader functionality to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Directx
Nvidia Windows Gpu Display Driver
Vmware Esxi
Vmware Fusion
Vmware Workstation