CVE-2017-0347: Out-of-bounds Read

Published May 9, 2017

Updated

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potential escalation of privileges.

Affected Software

2 affected components

Nvidia GPU driver

Microsoft Windows

Event History

May 9, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0347?

CVE-2017-0347 is classified as a denial of service vulnerability.

How do I fix CVE-2017-0347?

To fix CVE-2017-0347, update the NVIDIA Windows GPU Display Driver to the latest version provided by NVIDIA.

What versions of the NVIDIA Windows GPU Display Driver are affected by CVE-2017-0347?

All versions of the NVIDIA Windows GPU Display Driver are affected by CVE-2017-0347.

What component is responsible for CVE-2017-0347?

The vulnerability is present in the kernel mode layer of the NVIDIA GPU Display Driver, specifically in the handler for DxgkDdiEscape.

Can CVE-2017-0347 be exploited remotely?

CVE-2017-0347 is primarily a local vulnerability that can lead to a denial of service if exploited.