Kernel Mode Driver Vulnerability in NVIDIA Windows GPU Display Driver
CVE-2017-0315

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Windows Gpu Display Driver
Vendor
CVE Published:
15 February 2017

What is CVE-2017-0315?

The NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) that can be exploited through the DxgkDdiEscape handler. An attacker could potentially access an invalid object pointer, which may lead to system instability and could allow for denial of service. In some cases, this vulnerability may facilitate unauthorized escalation of privileges, granting malicious users elevated access within the system. Users are encouraged to update their drivers to ensure they are protected against this issue.

Affected Version(s)

Windows GPU Display Driver All

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4398
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.