CVE-2017-0345
Last modified
CVE-2017-0345 is a vulnerability of currently unknown severity. All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input used as an array size is not correctly validated allows out of bound access in kernel memory and may lead to denial of service or potential escalation of privileges. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input used as an array size is not correctly validated allows out of bound access in kernel memory and may lead to denial of service or potential escalation of privileges
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Gpu Driver | All versions |
References
- http://nvidia.custhelp.com/app/answers/detail/a_id/4462Vendor Advisory
- http://nvidia.custhelp.com/app/answers/detail/a_id/4462Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-0345?
How severe is CVE-2017-0345?
How do I fix CVE-2017-0345?
Are you affected by CVE-2017-0345?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
