PT-2013-2105 · Nvidia · Nvidia Update Service Daemon+1

Published 2013-04-08 · Updated 2013-04-09 · CVE-2013-0111

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA driver versions prior to 307.78 NVIDIA Release 310 versions prior to 311.00

Description The issue is related to the daemonu.exe, also known as the NVIDIA Update Service Daemon, which lacks double quote characters in the service path. This allows local users to gain privileges via a Trojan horse program.

Recommendations For NVIDIA driver versions prior to 307.78, update to version 307.78 or later. For NVIDIA Release 310 versions prior to 311.00, update to version 311.00 or later.

Fix

Related Identifiers

CVE-2013-0111

Affected Products

Nvidia Update Service Daemon

Nvidia Driver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-0111 · Security Note
• http://nvidia.com/object/product-security.html · Vendor Advisory
• http://kb.cert.org/vuls/id/957036 · Note