NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution.
References
Link | Resource |
---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/4797 | Vendor Advisory |
https://nvidia.custhelp.com/app/answers/detail/a_id/4806 | Vendor Advisory |
https://nvidia.custhelp.com/app/answers/detail/a_id/4841 | Vendor Advisory |
https://support.lenovo.com/us/en/product_security/LEN-27815 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
AND |
|
History
No history.
Information
Published : 2019-05-10 21:29
Updated : 2024-02-28 17:08
NVD link : CVE-2019-5676
Mitre link : CVE-2019-5676
CVE.ORG link : CVE-2019-5676
JSON object : View
Products Affected
nvidia
- geforce_experience
- gpu_display_driver
microsoft
- windows
CWE
CWE-427
Uncontrolled Search Path Element