PT-2019-17827 · Nvidia+1 · Nvidia Geforce Experience+1

Published 2019-11-09 · Updated 2022-01-01 · CVE-2019-5701

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.20.0.118

Description The issue arises when GameStream is enabled, allowing an attacker with local system access to load Intel graphics driver DLLs without validating the path or signature, which can lead to denial of service, information disclosure, or escalation of privileges through code execution.

Recommendations For versions prior to 3.20.0.118, update to version 3.20.0.118 or later to resolve the issue. As a temporary workaround, consider disabling GameStream until a patch is available. Restrict access to the Intel graphics driver DLLs to minimize the risk of exploitation.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2019-5701

Affected Products

Intel Graphics Driver

Nvidia Geforce Experience

References · 4

• https://nvidia.custhelp.com/app/answers/detail/a_id/4860 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5701 · Security Note
• https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-011.md · Note