PT-2013-2103 · Microsoft+1 · Windows+1

Published 2013-04-08 · Updated 2013-04-09 · CVE-2013-0109

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver versions prior to 307.78 NVIDIA Display Driver Release 310 versions prior to 311.00

Description The issue allows local users to gain privileges or cause a denial of service due to improper exception handling by the NVIDIA Display Driver service on Windows. This can be achieved via a crafted application, potentially leading to a memory overwrite.

Recommendations For NVIDIA Display Driver versions prior to 307.78, update to version 307.78 or later. For NVIDIA Display Driver Release 310 versions prior to 311.00, update to version 311.00 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-0109

Affected Products

Nvidia Gpu Display Driver

Windows

References · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/nvidia_nvsvc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/30393 · Exploit
• http://nvidia.com/object/product-security.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0109 · Security Note
• http://kb.cert.org/vuls/id/957036 · Note