cve/2017/CVE-2017-0347.md

18 lines
870 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2017-0347](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0347)
![](https://img.shields.io/static/v1?label=Product&message=GPU%20Display%20Driver&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Denial%20of%20Service%2C%20Escalation%20of%20Privileges&color=brighgreen)
### Description
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potential escalation of privileges.
### POC
#### Reference
- http://nvidia.custhelp.com/app/answers/detail/a_id/4462
#### Github
No PoCs found on GitHub currently.