CVSS: 6.9EPSS: 0%CPEs: 15EXPL: 0CVE-2015-5950
https://notcve.org/view.php?id=CVE-2015-5950
The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call. Vulnerabilidad en el controlador de pantalla NVIDIA R352 en versiones anteriores a 353.82 y R340 en versiones anteriores a 341.81 en Windows; R304 en versiones anteriores a 304.128, R340 en versiones anteriores a 340.93 y R352 en versiones anteriores a 352.41 en Linux y R352 en versiones anteriores a 352.46 en GRID vGPU y vSGA, permite a usuarios locales escribir en una posición de memoria del kernel arbitraria y por consiguiente obtener privilegios a traves de una llamada ioctl manipulada. • http://nvidia.custhelp.com/app/answers/detail/a_id/3763/~/cve-2015-5950-memory-corruption-due-to-an-unsanitized-pointer-in-the-nvidia http://www.securitytracker.com/id/1033662 http://www.ubuntu.com/usn/USN-2747-1 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468 https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468 https://support.lenovo.com/us/en/product_security/len_3313 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 1CVE-2013-0109 – Nvidia (nvsvc) Display Driver Service - Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2013-0109
The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service (memory overwrite) via a crafted application. El controlador NVIDIA anterior a v307.78, y Release v310 anterior a v311.00, en el controlador del servicio NVIDIA Display en Windows, no controla correctamente las excepciones, lo que permite a usuarios locales conseguir privilegios o causar una denegación de servicio (sobrescritura de memoria) a través de una aplicación manipulada. • https://www.exploit-db.com/exploits/30393 http://www.kb.cert.org/vuls/id/957036 http://www.nvidia.com/object/product-security.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •