CVE-2017-0349: Null Pointer Dereference

Published May 9, 2017

Updated

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service or potential escalation of privileges.

Affected Software

2 affected components

Nvidia GPU driver

Microsoft Windows

Event History

May 9, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0349?

CVE-2017-0349 is classified as a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2017-0349?

To fix CVE-2017-0349, users should update the NVIDIA Windows GPU Display Driver to the latest version provided by NVIDIA.

What systems are affected by CVE-2017-0349?

CVE-2017-0349 affects all versions of the NVIDIA Windows GPU Display Driver.

What are the potential impacts of CVE-2017-0349?

The potential impacts of CVE-2017-0349 include system crashes and denial of service due to improper pointer validation.

Is CVE-2017-0349 a local or remote vulnerability?

CVE-2017-0349 is considered a local vulnerability, as it requires local user access to exploit.