high7.8Public exploit code
CVE-2016-8810
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NVIDIA Driver - Missing Bounds Check in Escape 0x100009a2016-10-31 · dos · windows · Verified
Impact
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x100009a where a value passed from an user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Gpu Driver | from 340 before 342.00 from 375 before 375.63 |
Weakness classification
References
- NVD record
- CVE.org record
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247
- http://www.securityfocus.com/bid/93997
- https://support.lenovo.com/us/en/solutions/LEN-10822
- https://www.exploit-db.com/exploits/40665/
- http://nvidia.custhelp.com/app/answers/detail/a_id/4247
- http://www.securityfocus.com/bid/93997
- https://support.lenovo.com/us/en/solutions/LEN-10822
- https://www.exploit-db.com/exploits/40665/