Binary Planting Vulnerability in NVIDIA GeForce NOW on Windows
CVE-2020-5992

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Nvidia Geforce Now Application
Vendor
CVE Published:
11 November 2020

What is CVE-2020-5992?

The NVIDIA GeForce NOW application for Windows, prior to version 2.0.25.119, contains a vulnerability in its open-source software dependency involving the OpenSSL library. This flaw enables local users to exploit the system through binary planting attacks, potentially allowing them to execute arbitrary code or escalate their privileges. It is crucial for users to update to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

NVIDIA GeForce NOW Application All versions prior to 2.0.25.119 (Windows)

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5096
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.