For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x700010d where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges.
References
| Link | Resource |
|---|---|
| http://nvidia.custhelp.com/app/answers/detail/a_id/4247 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/93981 | Third Party Advisory VDB Entry |
| https://support.lenovo.com/us/en/solutions/LEN-10822 | Third Party Advisory |
| https://www.exploit-db.com/exploits/40657/ | Exploit Third Party Advisory VDB Entry |
| http://nvidia.custhelp.com/app/answers/detail/a_id/4247 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/93981 | Third Party Advisory VDB Entry |
| https://support.lenovo.com/us/en/solutions/LEN-10822 | Third Party Advisory |
| https://www.exploit-db.com/exploits/40657/ | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 02:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://nvidia.custhelp.com/app/answers/detail/a_id/4247 - Patch, Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/93981 - Third Party Advisory, VDB Entry | |
| References | () https://support.lenovo.com/us/en/solutions/LEN-10822 - Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/40657/ - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2016-11-08 20:59
Updated : 2024-11-21 02:57
NVD link : CVE-2016-7385
Mitre link : CVE-2016-7385
CVE.ORG link : CVE-2016-7385
JSON object : View
Products Affected
nvidia
- gpu_driver
microsoft
- windows
CWE
CWE-264
Permissions, Privileges, and Access Controls