PT-2017-16969 · Nvidia · Nvidia Windows Gpu Display Driver

Published 2017-09-22 · Updated 2017-09-28 · CVE-2017-6270

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver (affected versions not specified)

Description The issue arises from a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation, where untrusted user input is used as a divisor without validation during a calculation. This may lead to a potential divide by zero, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2017-6270

Affected Products

Nvidia Windows Gpu Display Driver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-6270 · Security Note
• http://nvidia.custhelp.com/app/answers/detail/a_id/4544 · Vendor Advisory
• http://securityfocus.com/bid/101002 · Note