For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gpu_driver | Nvidia | 340 (including) | 341.96 (excluding) |
| Gpu_driver | Nvidia | 352.0 (including) | 354.99 (excluding) |
| Gpu_driver | Nvidia | 361 (including) | 362.77 (excluding) |
| Gpu_driver | Nvidia | 367 (including) | 368.39 (excluding) |
Potential Mitigations
References
- http://nvidia.custhelp.com/app/answers/detail/a_id/4213
- http://www.securityfocus.com/bid/93256
- http://www.tripwire.com/state-of-security/vulnerability-management/warning-this-post-contains-graphic-nvidia-content/
- https://support.lenovo.com/us/en/product_security/ps500070
- http://nvidia.custhelp.com/app/answers/detail/a_id/4213
- http://www.securityfocus.com/bid/93256
- http://www.tripwire.com/state-of-security/vulnerability-management/warning-this-post-contains-graphic-nvidia-content/
- https://support.lenovo.com/us/en/product_security/ps500070