NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.
References
Link | Resource |
---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/4797 | Vendor Advisory |
https://nvidia.custhelp.com/app/answers/detail/a_id/4806 | Vendor Advisory |
https://nvidia.custhelp.com/app/answers/detail/a_id/4841 | Vendor Advisory |
https://support.lenovo.com/us/en/product_security/LEN-27815 | Third Party Advisory |
https://nvidia.custhelp.com/app/answers/detail/a_id/4797 | Vendor Advisory |
https://nvidia.custhelp.com/app/answers/detail/a_id/4806 | Vendor Advisory |
https://nvidia.custhelp.com/app/answers/detail/a_id/4841 | Vendor Advisory |
https://support.lenovo.com/us/en/product_security/LEN-27815 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
AND |
|
History
21 Nov 2024, 04:45
Type | Values Removed | Values Added |
---|---|---|
References | () https://nvidia.custhelp.com/app/answers/detail/a_id/4797 - Vendor Advisory | |
References | () https://nvidia.custhelp.com/app/answers/detail/a_id/4806 - Vendor Advisory | |
References | () https://nvidia.custhelp.com/app/answers/detail/a_id/4841 - Vendor Advisory | |
References | () https://support.lenovo.com/us/en/product_security/LEN-27815 - Third Party Advisory |
Information
Published : 2019-05-10 21:29
Updated : 2024-11-21 04:45
NVD link : CVE-2019-5676
Mitre link : CVE-2019-5676
CVE.ORG link : CVE-2019-5676
JSON object : View
Products Affected
nvidia
- gpu_display_driver
- geforce_experience
microsoft
- windows
CWE
CWE-427
Uncontrolled Search Path Element