PT-2019-17827
CVE-2019-5701
·
Publicado
2019-11-09
·
Atualizado
2022-01-01
Descrição por
CVSS 3.1
7.8
AltaMétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NVIDIA GeForce Experience versions prior to 3.20.0.118
Description
The issue arises when GameStream is enabled, allowing an attacker with local system access to load Intel graphics driver DLLs without validating the path or signature, which can lead to denial of service, information disclosure, or escalation of privileges through code execution.
Recommendations
For versions prior to 3.20.0.118, update to version 3.20.0.118 or later to resolve the issue. As a temporary workaround, consider disabling GameStream until a patch is available. Restrict access to the Intel graphics driver DLLs to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾