PT-2019-17813 · Nvidia · Nvidia Windows Gpu Display Driver

Published 2019-08-06 · Updated 2020-08-24 · CVE-2019-5683

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver (all versions)

Description The issue is related to the user mode video driver trace logger component, which does not check for hard link attacks. This behavior can lead to code execution, denial of service, or escalation of privileges when an attacker has access to the system and creates a hard link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2019-5683

Affected Products

Nvidia Windows Gpu Display Driver

References · 3

• https://nvidia.custhelp.com/app/answers/detail/a_id/4841 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5683 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-28096 · Note