Published: 08/11/2016 Updated: 07/03/2019

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 prior to 342.00 and R375 prior to 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000014 where a value passed from an user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nvidia gpu_driver

Source: bugschromiumorg/p/project-zero/issues/detail?id=946 There is a missing bounds check in inner loop of the escape handler for 0x7000014 that leads to a stack buffer overflow: for (DWORD i = 0; < escape->num_data; ++i) { // size is user controlled size = escape->data[i]size; for (DWORD j = 0; j < size; ...

CWE-264 http://nvidia.custhelp.com/app/answers/detail/a_id/4247 http://www.securityfocus.com/bid/94001 https://support.lenovo.com/us/en/solutions/LEN-10822 https://www.exploit-db.com/exploits/40667/https://nvd.nist.gov https://www.exploit-db.com/exploits/40667/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-8805

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect