PT-2020-18882 · Openssl+1 · Openssl+1

Published 2020-11-11 · Updated 2020-11-23 · CVE-2020-5992

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce NOW application software on Windows versions prior to 2.0.25.119

Description The issue concerns a vulnerability in the open-source software dependency of the NVIDIA GeForce NOW application software on Windows, specifically in the OpenSSL library. This vulnerability makes the software susceptible to binary planting attacks by a local user, potentially leading to code execution or escalation of privileges.

Recommendations For versions prior to 2.0.25.119, update to version 2.0.25.119 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable OpenSSL library until a patch is applied.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2020-5992

Affected Products

Nvidia Geforce Now

Openssl

References · 5

• https://nvidia.custhelp.com/app/answers/detail/a_id/5096 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5992 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5992 · Security Note
• https://t.me/cibsecurity/16193 · Telegram Post
• https://t.me/cvenotify/5558 · Telegram Post