First published: Mon Apr 08 2013(Updated: )
The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service (memory overwrite) via a crafted application.
Credit: cret@cert.org
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA GPU Display Driver | <=307.00 | |
NVIDIA GPU Display Driver | =310.00 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0109 is rated as a high severity vulnerability due to its potential for privilege escalation and denial of service.
To fix CVE-2013-0109, update the NVIDIA Display Driver to version 307.78 or later.
CVE-2013-0109 is caused by improper exception handling in the NVIDIA Display Driver service.
Local users on Windows systems with vulnerable versions of the NVIDIA Display Driver are affected by CVE-2013-0109.
The potential impacts of CVE-2013-0109 include privilege escalation for local users and possible denial of service due to memory overwrite.