CVE-2017-0346

EUVD-2017-0702
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
Affected Products (NVD)
VendorProductVersion
nvidiagpu_driver
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://nvidia.custhelp.com/app/answers/detail/a_id/4462
http://www.securityfocus.com/bid/98503
http://nvidia.custhelp.com/app/answers/detail/a_id/4462
http://www.securityfocus.com/bid/98503