CVE-2019-5694

NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service or information disclosure through code execution. The attacker requires local system access.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@nvidia.com

Published

2019-11-09

Last modified

2024-08-04

Weaknesses

CWE-427

Affected products

• Gpu Driver (Nvidia)
• Nvidia Gpu Display Driver (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/4907
• https://safebreach.com/Post/NVIDIA-GPU-Display-Drivers-for-Windows-and-GFE-Software-DLL-Preloading-and-Potential-Abuses…