CVE-2016-8823: Buffer Overflow

Published Dec 16, 2016

Updated

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where the size of an input buffer is not validated leading to a denial of service or possible escalation of privileges

Affected Software

2 affected components

Nvidia GPU driver

Microsoft Windows

Event History

Dec 16, 2016

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability is locally exploitable and requires low privileges. User interaction is not required.

What are the potential impacts if exploitation succeeds?

Successful exploitation can cause a denial of service or potentially allow escalation of privileges. The listed impact includes high confidentiality, integrity, and availability effects.

Which systems are affected?

The affected software is identified as NVIDIA Windows GPU Display Driver, and the description states that all versions contain the vulnerable kernel-mode DxgDdiEscape handler.

CVE-2016-8823: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What are the potential impacts if exploitation succeeds?

Which systems are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What are the potential impacts if exploitation succeeds?

Which systems are affected?