high7.8Public exploit code
CVE-2016-8808
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NVIDIA Driver - Missing Bounds Check in Escape 0x70000d52016-10-31 · dos · windows · Verified
Impact
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000d5 where a value passed from an user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Gpu Driver | from 340 before 342.00 from 375 before 375.63 |
Weakness classification
References
- NVD record
- CVE.org record
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247
- http://www.securityfocus.com/bid/93999
- https://support.lenovo.com/us/en/solutions/LEN-10822
- https://www.exploit-db.com/exploits/40666/
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247
- http://www.securityfocus.com/bid/93999
- https://support.lenovo.com/us/en/solutions/LEN-10822
- https://www.exploit-db.com/exploits/40666/