CVE-2017-0316
In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to the driver is used without validation, which may lead to denial of service or possible escalation of privileges.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - psirt@nvidia.com
- Published
- 2017-10-16
- Last modified
- 2024-09-16
- Weaknesses
- CWE-20
Affected products
References
- http://nvidia.custhelp.com/app/answers/detail/a_id/4560
