CVE-2016-8812

EPSS 1.6%

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading to a denial of service or escalation of privileges.

Affected products

n/a · Quadro, NVS, and GeForce (all versions)

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/40660/unverified exploitdbwww.exploit-db.com/exploits/40660unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4247 https://www.exploit-db.com/exploits/40660/http://www.securityfocus.com/bid/93986