First published: Wed Feb 15 2017(Updated: )
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA GPU kernel driver | ||
Microsoft Windows Operating System | ||
All of | ||
NVIDIA GPU kernel driver | ||
Microsoft Windows Operating System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-0313 is classified as a high severity vulnerability that could allow an attacker to execute arbitrary code.
CVE-2017-0313 is caused by improper handling of untrusted input in the NVIDIA Windows GPU Display Driver's kernel mode layer.
All versions of the NVIDIA Windows GPU Display Driver are potentially affected by CVE-2017-0313.
To fix CVE-2017-0313, you should update the NVIDIA GPU Display Driver to the latest version provided by NVIDIA.
CVE-2017-0313 impacts systems running affected versions of the NVIDIA GPU Display Driver on Microsoft Windows.