Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-6101

Опубликовано: 20 июл. 2020
Источник: nvd
CVSS3: 9.9
CVSS2: 6.5
EPSS Низкий

Описание

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered from a HYPER-V guest using the RemoteFX feature, leading to executing the vulnerable code on the HYPER-V host (inside of the rdvgm.exe process). Theoretically this vulnerability could be also triggered from web browser (using webGL and webassembly).

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:amd:radeon_directx_11_driver_atidxx64.dll:26.20.15019.19000:*:*:*:*:*:*:*

EPSS

Процентиль: 76%
0.00932
Низкий

9.9 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

github
больше 3 лет назад

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered from a HYPER-V guest using the RemoteFX feature, leading to executing the vulnerable code on the HYPER-V host (inside of the rdvgm.exe process). Theoretically this vulnerability could be also triggered from web browser (using webGL and webassembly).

EPSS

Процентиль: 76%
0.00932
Низкий

9.9 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-787