CVE

Id
95627  
CVE No.
CVE-2016-8807  
Status
Candidate  
Description
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x10000e9 where a value is passed from an user to the driver is used without validation as the size input to memcpy() causing a stack buffer overflow, leading to denial of service or potential escalation of privileges.  
Phase
Assigned (20161018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
799030 95627 CVE-2016-8807 CONFIRM:http://nvidia.custhelp.com/app/answers/detail/a_id/4247  View
799031 95627 CVE-2016-8807 CONFIRM:https://support.lenovo.com/us/en/solutions/LEN-10822  View
799032 95627 CVE-2016-8807 BID:94002  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5360 JVNDB-2016-006133 Linux Kernel の drivers/staging/android/ion/ion.c の ion_ioctl 関数における権限を取得される脆弱性 Linux Kernel の drivers/staging/android/ion/ion.c の ion_ioctl 関数には、競合状態により、権限を取得される、またはサービス運用妨害 (解放済みメモリの使用 (Use-after-free) ) 状態にされる脆弱性が存在します。 CVE-2016-9120 95627 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006133.html  View