CVE-2019-5701: High severity nvidia geforce experience vulnerability
NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with local system access can load the Intel graphics driver DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), which may lead to denial of service, information disclosure, or escalation of privileges through code execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is NVIDIA GeForce Experience vulnerability (CVE-2019-5701)?
NVIDIA GeForce Experience vulnerability (CVE-2019-5701) is a security flaw that allows an attacker with local system access to load Intel graphics driver DLLs without validating the path or signature, potentially leading to a binary planting or DLL preloading attack.
What is the severity level of NVIDIA GeForce Experience vulnerability (CVE-2019-5701)?
The severity level of NVIDIA GeForce Experience vulnerability (CVE-2019-5701) is high with a severity value of 7.8.
What software versions are affected by NVIDIA GeForce Experience vulnerability (CVE-2019-5701)?
NVIDIA GeForce Experience versions prior to 3.20.0.118 are affected by the vulnerability (CVE-2019-5701).
How can an attacker exploit NVIDIA GeForce Experience vulnerability (CVE-2019-5701)?
An attacker with local system access can exploit NVIDIA GeForce Experience vulnerability (CVE-2019-5701) by loading Intel graphics driver DLLs without validating the path or signature.
Are there any resources available for more information about NVIDIA GeForce Experience vulnerability (CVE-2019-5701)?
Yes, you can find more information about NVIDIA GeForce Experience vulnerability (CVE-2019-5701) in the following references: [Link 1](https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-011.md) and [Link 2](https://nvidia.custhelp.com/app/answers/detail/a_id/4860).