Lucene search

NvidiaCVE-2016-5852

HistoryNov 08, 2016 - 8:59 p.m.

CVE-2016-5852

2016-11-0820:59:05

nvidia

web.nvd.nist.gov

nvidia

quadro

nvs

geforce

unquoted service path

vulnerability

windows

cve-2016-5852

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

20.8%

JSON

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system at the system/user privilege level. The CVE-2016-5852 ID is for the NVTray Plugin unquoted service path.

Affected configurations

Nvd

Node

nvidiageforce_experienceRange≤-

AND

nvidiageforce_910mMatch-

nvidiageforce_920mMatch-

nvidiageforce_920mxMatch-

nvidiageforce_930mMatch-

nvidiageforce_930mxMatch-

nvidiageforce_940mMatch-

nvidiageforce_940mxMatch-

nvidiageforce_945mMatch-

nvidiageforce_gt_710Match-

nvidiageforce_gt_730Match-

nvidiageforce_gtx_1050Match-

nvidiageforce_gtx_1060Match-

nvidiageforce_gtx_1070Match-

nvidiageforce_gtx_1080Match-

nvidiageforce_gtx_950mMatch-

nvidiageforce_gtx_960mMatch-

nvidiageforce_gtx_965mMatch-

nvidianvs_310Match-

nvidianvs_315Match-

nvidianvs_510Match-

nvidianvs_810Match-

nvidiaquadro_k1200Match-

nvidiaquadro_k420Match-

nvidiaquadro_k620Match-

nvidiaquadro_m1000mMatch-

nvidiaquadro_m2000Match-

nvidiaquadro_m2000mMatch-

nvidiaquadro_m3000mMatch-

nvidiaquadro_m4000Match-

nvidiaquadro_m4000mMatch-

nvidiaquadro_m5000Match-

nvidiaquadro_m5000mMatch-

nvidiaquadro_m500mMatch-

nvidiaquadro_m5500Match-

nvidiaquadro_m6000Match-

nvidiaquadro_m600mMatch-

nvidiaquadro_p5000Match-

nvidiaquadro_p6000Match-

nvidiatitan_xMatch-

VendorProductVersionCPE
nvidiageforce_experience*cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*
nvidiageforce_910m-cpe:2.3:h:nvidia:geforce_910m:-:*:*:*:*:*:*:*
nvidiageforce_920m-cpe:2.3:h:nvidia:geforce_920m:-:*:*:*:*:*:*:*
nvidiageforce_920mx-cpe:2.3:h:nvidia:geforce_920mx:-:*:*:*:*:*:*:*
nvidiageforce_930m-cpe:2.3:h:nvidia:geforce_930m:-:*:*:*:*:*:*:*
nvidiageforce_930mx-cpe:2.3:h:nvidia:geforce_930mx:-:*:*:*:*:*:*:*
nvidiageforce_940m-cpe:2.3:h:nvidia:geforce_940m:-:*:*:*:*:*:*:*
nvidiageforce_940mx-cpe:2.3:h:nvidia:geforce_940mx:-:*:*:*:*:*:*:*
nvidiageforce_945m-cpe:2.3:h:nvidia:geforce_945m:-:*:*:*:*:*:*:*
nvidiageforce_gt_710-cpe:2.3:h:nvidia:geforce_gt_710:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nvidia	geforce_experience	*	cpe:2.3:a:nvidia:geforce_experience::::::::
nvidia	geforce_910m	-	cpe:2.3:h:nvidia:geforce_910m:-:::::::*
nvidia	geforce_920m	-	cpe:2.3:h:nvidia:geforce_920m:-:::::::*
nvidia	geforce_920mx	-	cpe:2.3:h:nvidia:geforce_920mx:-:::::::*
nvidia	geforce_930m	-	cpe:2.3:h:nvidia:geforce_930m:-:::::::*
nvidia	geforce_930mx	-	cpe:2.3:h:nvidia:geforce_930mx:-:::::::*
nvidia	geforce_940m	-	cpe:2.3:h:nvidia:geforce_940m:-:::::::*
nvidia	geforce_940mx	-	cpe:2.3:h:nvidia:geforce_940mx:-:::::::*
nvidia	geforce_945m	-	cpe:2.3:h:nvidia:geforce_945m:-:::::::*
nvidia	geforce_gt_710	-	cpe:2.3:h:nvidia:geforce_gt_710:-:::::::*

Rows per page:

1-10 of 401

CNA Affected

[
  {
    "product": "Quadro, NVS, GeForce (all versions)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Quadro, NVS, GeForce (all versions)"
      }
    ]
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/4213

www.securityfocus.com/bid/93251

support.lenovo.com/us/en/product_security/ps500070

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

20.8%

JSON

Related for CVE-2016-5852