medium6.7
CVE-2019-5676
NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without valida…
Impact
NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Gpu Display Driver | from 410 before 412.36 from 418 before 425.51 from 430 before 430.64 |
| Nvidia | Geforce Experience | before 3.19 |
Weakness classification
References
- NVD record
- CVE.org record
- https://nvidia.custhelp.com/app/answers/detail/a_id/4797
- https://nvidia.custhelp.com/app/answers/detail/a_id/4806
- https://nvidia.custhelp.com/app/answers/detail/a_id/4841
- https://support.lenovo.com/us/en/product_security/LEN-27815
- https://nvidia.custhelp.com/app/answers/detail/a_id/4797
- https://nvidia.custhelp.com/app/answers/detail/a_id/4806
- https://nvidia.custhelp.com/app/answers/detail/a_id/4841
- https://support.lenovo.com/us/en/product_security/LEN-27815