PT-2021-16760

CVE-2021-25694

·

Published

2021-05-13

·

Updated

2021-05-25

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Teradici PCoIP Graphics Agent for Windows versions prior to 21.03
Description The issue concerns the lack of validation for the NVENC.dll file. An attacker could potentially replace this .dll, allowing them to redirect pixels elsewhere.
Recommendations For versions prior to 21.03, update to version 21.03 or later to resolve the issue. As a temporary workaround, consider restricting access to the NVENC.dll file to prevent potential tampering.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾