CVE-2016-8827: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack...

PT-2016-7596

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions 3.x before 3.1.0.52 Description The issue concerns a lack of proper access control and parameter validation in the NVIDIA Web Helper.exe, specifically affecting the local web API endpoint "/VisualOPS/v.1.0./"...

CVE-2016-4959

For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash...

CVE-2016-7382

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an...

PT-2016-7581

Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 2.11.4.125 NVIDIA GeForce Experience versions prior to 3.1.0.52 Description The issue is related to a stack buffer overflow in the kernel mode layer, specifically in the nvstreamkms.sys module. This...

CVE-2016-8812: Improper Restriction of Operations within the Bounds of a Memory Buffer

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer nvstreamkms.sys allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading t...

CVE-2016-4959: NULL Pointer Dereference

For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash...

CVE-2016-4960: Improper Input Validation

For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privilege...

Apple Mac OSX Kernel - Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in Nvidia Geforce Driver

Apple Mac OSX Kernel - Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in Nvidia Geforce Driver / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=709 nvDevice::ReleaseDeviceTexture is external method 0x10a of userclient 5 of the geforce IOAccelerator. ...

Apple Mac OSX - Kernel Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in

Exploit for macOS platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=709 nvDevice::ReleaseDeviceTexture is external method 0x10a of userclient 5 of the geforce IOAccelerator. It takes a single uint argument text:000000000001BCD2 mov r14d, esi...

Apple Mac OSX Kernel - Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in Nvidia Geforce Driver

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=709 nvDevice::ReleaseDeviceTexture is external method 0x10a of userclient 5 of the geforce IOAccelerator. It takes a single uint argument text:000000000001BCD2 mov r14d, esi ... text:000000000001BD08 and r14d, 7FFFFFFFh -- clear...

GPU cracks 6 character password in 4 seconds

GPU cracks 6 character password in 4 seconds An nVidia GeForce GT220 graphics card, which costs about £30, is capable of cracking strong passwords in a matter of hours. Security experts were able to crack a 6 character password in 4 seconds, a 7 character password in less than 5 minutes, and 8...

GPU cracks 6 character password in 4 seconds

GPU cracks 6 character password in 4 seconds AnnVidia GeForce GT220 graphics card, which costs about £30, is capable of cracking strong passwords in a matter of hours. Security experts were able to crack a 6 character password in 4 seconds, a 7 character password in less than 5 minutes, and 8...

PT-2011-3951

Name of the Vulnerable Software and Affected Versions NVIDIA Geforce 310 driver version 6.14.12.7061 Description The issue allows remote attackers to cause a denial of service, resulting in a system crash, by visiting a crafted web page with Google Chrome or Mozilla Firefox. This is demonstrated ...

CVE-2011-2602: Undefined Security Weakness

The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service system crash via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK...