CVE-2016-7390

7.8HIGH

Key Information:

Vendor
Nvidia
Status
Quadro, Nvs, And Geforce (all Versions)
Vendor
CVE Published:
8 November 2016

Summary

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000194 where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.

Affected Version(s)

Quadro, NVS, and GeForce (all ) Quadro, NVS, and GeForce (all versions)

References

https://www.exploit-db.com/exploits/40658/
exploitx_refsource_EXPLOIT-DB
https://support.lenovo.com/us/en/solutions/LEN-10822
x_refsource_CONFIRM
http://www.securityfocus.com/bid/93984
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.