PT-2019-17820

CVE-2019-5694

·

Publicado

2019-11-09

·

Atualizado

2022-01-01

Descrição por

CVSS 2.0
4.4
Média
MétricasAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, R390 driver version
Description The issue arises from the incorrect loading of Windows system DLLs by the NVIDIA Control Panel without proper validation of the path or signature, making it susceptible to a binary planting or DLL preloading attack. This could potentially lead to denial of service or information disclosure through code execution, provided the attacker has local system access.
Recommendations For R390 driver version, update to a version that addresses the DLL loading issue to prevent potential code execution and information disclosure. As a temporary workaround, consider restricting local system access to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾