high7.0
CVE-2019-5674
NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled.
Impact
NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Geforce Experience | before 3.18 |
Weakness classification
References
- NVD record
- CVE.org record
- http://support.lenovo.com/us/en/solutions/LEN-27096
- http://www.securityfocus.com/bid/107621
- https://nvidia.custhelp.com/app/answers/detail/a_id/4784
- http://support.lenovo.com/us/en/solutions/LEN-27096
- http://www.securityfocus.com/bid/107621
- https://nvidia.custhelp.com/app/answers/detail/a_id/4784