Lucene search

[email protected]CVE-2019-5676

HistoryMay 10, 2019 - 9:29 p.m.

CVE-2019-5676

2019-05-1021:29:00

CWE-427

[email protected]

web.nvd.nist.gov

nvidia

windows

gpu

display driver

vulnerability

dll loading

code execution

escalation of privileges

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

JSON

NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.

Affected configurations

NVD

Node

nvidiagpu_display_driverRange410–412.36windows

nvidiagpu_display_driverRange418–425.51windows

nvidiagpu_display_driverRange430–430.64windows

Node

nvidiageforce_experienceRange<3.19

AND

microsoftwindowsMatch-

CPENameOperatorVersion
nvidia:gpu_display_drivernvidia gpu display driverlt412.36
nvidia:gpu_display_drivernvidia gpu display driverlt425.51
nvidia:gpu_display_drivernvidia gpu display driverlt430.64

CPE	Name	Operator	Version
nvidia:gpu_display_driver	nvidia gpu display driver	lt	412.36
nvidia:gpu_display_driver	nvidia gpu display driver	lt	425.51
nvidia:gpu_display_driver	nvidia gpu display driver	lt	430.64

CNA Affected

[
  {
    "product": "NVIDIA GPU Display Driver",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  }
]