NVIDIA GPU and GeForce Experience Installer Vulnerability
CVE-2017-0317

7.5HIGH

Key Information:

Vendor
Nvidia
Status
Windows Gpu Display Driver
Vendor
CVE Published:
15 February 2017

Summary

A vulnerability exists in the NVIDIA GPU and GeForce Experience installer due to improper permission settings on the package extraction path. This flaw allows a non-privileged user to manipulate extracted files, potentially enabling escalation of privileges through unauthorized code execution. Users should ensure they keep their systems updated to mitigate the risks associated with this vulnerability.

Affected Version(s)

Windows GPU Display Driver All

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4398
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.