125 matches found
CVE-2016-7384
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys where unchecked input/output lengths in UVMLiteController Device IO Control handling may lead to denial of...
CVE-2016-8810
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x100009a where a value passed from an user to the driver is used without...
CVE-2016-7382
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an...
CVE-2016-8811
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x7000170 where the size of an input buffer is not validated, leading to denial ...
CVE-2016-8809
CVE-2016-8809 affects NVIDIA Windows GPU Display Driver (Quadro/NVS/GeForce) with vulnerable nvlddmkm.sys DxgDdiEscape handler for 0x70001b2 where the input buffer size is not validated, enabling local denial of service or privilege escalation. Affected driver lines include NVIDIA Windows Display...
CVE-2016-7382
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an...
CVE-2016-7389
For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R36193 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer nvidia.ko handler for mmap where improper inpu...
CVE-2016-3161: Undefined Security Weakness
For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...
PT-2016-5390
Name of the Vulnerable Software and Affected Versions NVIDIA Quadro, NVS, and GeForce products affected versions not specified Description The issue concerns unquoted service path vulnerabilities in Windows, specifically affecting GFE GameStream and NVTray Plugin. A successful exploit can enable...
CVE-2016-4961: Improper Input Validation
For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVStreamKMS.sys API layer caused a denial of service vulnerability blue screen crash within the NVIDIA Windows graphics drivers...
CVE-2016-4959: NULL Pointer Dereference
For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash...
PT-2016-6192
Name of the Vulnerable Software and Affected Versions NVIDIA Quadro, NVS, and GeForce products affected versions not specified Description The issue is related to the improper validation of user-supplied data by the NVIDIA NVStreamKMS.sys service component through its API entry points, leading to...
PT-2016-6225
Name of the Vulnerable Software and Affected Versions NVIDIA Quadro, NVS, and GeForce products affected versions not specified Description The issue is caused by improper sanitization of parameters in the NVAPI support layer, leading to a denial of service vulnerability that results in a blue...
PT-2016-6717
Name of the Vulnerable Software and Affected Versions NVIDIA Quadro, NVS, and GeForce products affected versions not specified Description The issue concerns unquoted service path vulnerabilities in Windows, specifically affecting GFE GameStream and NVTray Plugin. A successful exploit can enable...
PT-2016-6191
Name of the Vulnerable Software and Affected Versions NVIDIA Quadro, NVS, and GeForce products affected versions not specified Description The issue concerns a Remote Desktop denial of service that can be exploited to cause a kernel null pointer dereference, resulting in a blue screen crash on...
CVE-2016-5852: Undefined Security Weakness
For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...
CVE-2016-4960: Improper Input Validation
For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entry points causing an elevation of privilege...
Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability
OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning a buffer overflow vulnerability in Schneider Electric’s Pelco DS-NVs software package. This vulnerability was reported to ZDI by security researchers Ariele Caltabiano and Andrea Micalizzi. Schneider Electric h...
Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability
Schneider Electric Pelco DS-NVs is a suite of IP video management software from Schneider Electric France. A buffer overflow vulnerability exists in the DLL for Schneider Electric Pelco DS-NVs versions prior to 7.8.90. A remote attacker could exploit this vulnerability to execute arbitrary code...
