PT-2013-2104 · Nvidia · Nvidia Stereoscopic 3D Driver

Published 2013-04-08 · Updated 2013-04-09 · CVE-2013-0110

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Stereoscopic 3D Driver versions prior to 307.78 NVIDIA Stereoscopic 3D Driver Release 310 versions prior to 311.00

Description The issue is related to the nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service. It lacks double quote characters in the service path, allowing local users to gain privileges via a Trojan horse program.

Recommendations For NVIDIA Stereoscopic 3D Driver versions prior to 307.78, update to version 307.78 or later. For NVIDIA Stereoscopic 3D Driver Release 310 versions prior to 311.00, update to version 311.00 or later.

Fix

Related Identifiers

CVE-2013-0110

Affected Products

Nvidia Stereoscopic 3D Driver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-0110 · Security Note
• http://nvidia.com/object/product-security.html · Vendor Advisory
• http://kb.cert.org/vuls/id/957036 · Note