exploitDog

CVE-2013-0110

Опубликовано: 08 апр. 2013

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program.

Ссылки

http://www.kb.cert.org/vuls/id/957036
US Government Resource
http://www.nvidia.com/object/product-security.html
Vendor Advisory
http://www.kb.cert.org/vuls/id/957036
US Government Resource
http://www.nvidia.com/object/product-security.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nvidia:driver:*:-:*:*:*:windows:*:*

Версия до 307.00 (включая)

cpe:2.3:a:nvidia:driver:310.00:-:*:*:*:windows:*:*

EPSS

Процентиль: 36%

0.00149

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-m246-qvwg-qmgv

github

почти 4 года назад

nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program.

EPSS

Процентиль: 36%

0.00149

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other