PT-2019-17827

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.20.0.118 Description The issue arises when GameStream is enabled, allowing an attacker with local system access to load Intel graphics driver DLLs without validating the path or signature, which ca...

PT-2019-17815

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.20.1 Description The issue concerns a vulnerability in the Downloader component where a user with local system access can craft input to download and save malicious files, potentially leading to co...

NVIDIA GeForce Experience - May 2019 - Lenovo Support US

Lenovo Security Advisory: LEN-27815 Potential Impact: Privilege escalation, information disclosure, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5676, CVE-2019-5678 Summary Description: NVIDIA has released a software update to address potential security...

Nvidia GeForce Experience Web Helper - Command Injection Exploit

Exploit for windows platform in category local exploits //Send request to local GFE server function submitRequestport,secret var xhr = new XMLHttpRequest; xhr.open"POST", "http://127.0.0.1:"+port+"/gfeupdate/autoGFEInstall/", true; xhr.setRequestHeader"Accept",...

Nvidia GeForce Experience Web Helper - Command Injection

Nvidia GeForce Experience Web Helper - Command Injection //Send request to local GFE server function submitRequestport,secret var xhr = new XMLHttpRequest; xhr.open"POST", "http://127.0.0.1:"+port+"/gfeupdate/autoGFEInstall/", true; xhr.setRequestHeader"Accept",...

Nvidia GeForce Experience Web Helper - Command Injection

//Send request to local GFE server function submitRequestport,secret var xhr = new XMLHttpRequest; xhr.open"POST", "http://127.0.0.1:"+port+"/gfeupdate/autoGFEInstall/", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8";...

CVE-2019-5678

NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution, denial of service or information disclosure...

CVE-2019-5678: Improper Input Validation

NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution, denial of service or information disclosure...

PT-2019-17810

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.19 Description The issue is related to a vulnerability in the Web Helper component of NVIDIA GeForce Experience. An attacker with local system access can craft input that may not be properly...

NVIDIA GeForce Experience Update - Lenovo Support US

No description provided...

CVE-2019-5674: Improper Link Resolution Before File Access

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation...

PT-2019-17809

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.18 Description The issue arises when ShadowPlay or GameStream is enabled, allowing an attacker with system access to potentially execute code, cause a denial of service, or escalate privileges by...

PT-2019-5734

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce, Quadro, NVS, and Tesla drivers for Windows affected versions not specified Description: The issue is related to a buffer overflow in the DxgkDdiEscape function of NVIDIA graphics drivers, which can be exploited to cause a deni...

PT-2019-20337

Уязвимость функции DxgkDdiSubmitCommandVirtual драйвера графических процессоров NVIDIA GeForce, Quadro и Tesla для операционных систем Windows связана с ошибками разыменования указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или повысить свои привилегии...

PT-2019-20336

Уязвимость функции DxgkDdiEscape драйвера графических процессоров NVIDIA GeForce, Quadro и Tesla для операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или повысить свои привилегии...

PT-2019-20338

Уязвимость функции DxgkDdiEscape драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

PT-2019-20342

Уязвимость функции DxgkDdiEscape драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании, повысить свои привилегии,...

PT-2019-5725

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce, Quadro, and Tesla graphics drivers for Windows affected versions not specified Description: The issue is related to errors in pointer dereferencing in the DxgkDdiSubmitCommandVirtual function of NVIDIA graphics drivers...

PT-2019-3155

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce, Quadro, and Tesla affected versions not specified Description: The issue is related to errors in link processing within the 3D vision component of NVIDIA's graphics processing software. Exploitation of this issue could allow a...

PT-2019-3153

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce, Quadro, and Tesla affected versions not specified Description: The issue is related to a lack of protection for internal data in NVIDIA graphics processing units. Exploitation of this issue could allow an attacker to disclose...