CVE-2016-8806

EPSS 1.6%

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x5000027 where a pointer passed from an user to the driver is used without validation, leading to denial of service or potential escalation of privileges.

Productos afectados

n/a · Quadro, NVS, and GeForce (all versions)

PoCs públicas encontradas — 2

cve_referencewww.exploit-db.com/exploits/40663/no verificado exploitdbwww.exploit-db.com/exploits/40663no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://nvidia.custhelp.com/app/answers/detail/a_id/4247 https://support.lenovo.com/us/en/solutions/LEN-10822 https://www.exploit-db.com/exploits/40663/http://www.securityfocus.com/bid/93990