PT-2023-1475 · Nvidia · Nvidia Geforce Experience

Minse Kim · Publicado 2023-01-30 · Atualizado 2023-02-14 · CVE-2022-31611

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience (affected versions not specified)

Description The issue is related to an uncontrolled search path vulnerability in the client installers of NVIDIA GeForce Experience. This vulnerability can be exploited by an attacker with user-level privileges to load an arbitrary DLL when the installer is launched, potentially leading to escalation of privileges and code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

BDU:2023-00884

CVE-2022-31611

Produtos afetados

Nvidia Geforce Experience

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-31611 · Nota de Segurança
• https://nvidia.custhelp.com/app/answers/detail/a_id/5384 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-00884 · Nota de Segurança
• https://t.me/cibsecurity/57647 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-31611 · Aviso do Fabricante