PT-2016-6717 · Microsoft+1 · Windows+5

Alin Ghica · Published 2016-11-08 · Updated 2016-12-15 · CVE-2016-5852

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Quadro, NVS, and GeForce products (affected versions not specified)

Description The issue concerns unquoted service path vulnerabilities in Windows, specifically affecting GFE GameStream and NVTray Plugin. A successful exploit can enable malicious code to execute on the system at the system or user privilege level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2016-5852

Affected Products

Gfe Gamestream

Nvidia Geforce

Nvidia Nvs

Nvidia Quadro

Nvtray Plugin

Windows

References · 5

• http://nvidia.custhelp.com/app/answers/detail/a_id/4213 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-5852 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5852 · Security Note
• http://securityfocus.com/bid/93251 · Note
• https://support.lenovo.com/us/en/product_security/ps500070 · Note