PT-2017-10519 · Nvidia · Nvidia Geforce Experience

Tim Harrison · Published 2017-10-16 · Updated 2019-11-07 · CVE-2017-0316

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.10.0.55

Description The issue arises from a lack of validation of a value passed from a user to the driver in the NVISystemService64 component of the NVIDIA Installer Framework. This could potentially lead to a denial of service or possible escalation of privileges.

Recommendations For versions prior to 3.10.0.55, update to version 3.10.0.55 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-0316

Affected Products

Nvidia Geforce Experience

References · 3

• http://nvidia.custhelp.com/app/answers/detail/a_id/4560 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-0316 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0316 · Security Note