Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-0287 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:56.362Z Vendors: Microsoft Corporation Products: Uniscribe Problem Types: Information Disclosure Description: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Graphics Uniscribe Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0288, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533. Additional Analyst Notes: - CVE Program Container: References: - https://w
-2017-8531, CVE-2017-8532, and CVE-2017-8533. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42239/ - http://www.securitytracker.com/id/1038662 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0287 - http://www.securityfocus.com/bid/98922
CVE ID: CVE-2017-0288 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:55.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Windows Graphics Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0289, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42241/ - http://ww
Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42241/ - http://www.securityfocus.com/bid/98923 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0288
CVE ID: CVE-2017-0289 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:56.811Z Vendors: Microsoft Corporation Products: Uniscrbe Problem Types: Information Disclosure Description: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows improper disclosure of memory contents, aka "Windows Graphics Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0286, CVE-2017-0287, CVE-2017-0288, CVE-2017-8531, CVE-2017-8532, and CVE-2017-8533. Additional Analyst Notes: - CVE Program Container: References: - https://port
17-8531, CVE-2017-8532, and CVE-2017-8533. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0289 - https://www.exploit-db.com/exploits/42240/ - http://www.securitytracker.com/id/1038662 - http://www.securityfocus.com/bid/98929
CVE ID: CVE-2017-0290 State: PUBLISHED Published: 2017-05-09T06:03:00 Last Updated: 2024-08-05T13:03:55.875Z Vendors: Microsoft Corporation Products: Microsoft Malware Protection Engine Problem Types: Remote Code Execution Description: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 does not properly scan a specially crafted file leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." Additional Analyst Notes
mory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://arstechnica.com/information-technology/2017/05/windows-defender-nscript-remote-vulnerability/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=1252 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0290 - http://www.securitytracker.com/id/1038420 - https://www.exploit-db.com/exploits/41975/ - http://www.securitytracker.com/id/1038419 - https://0patch.blogspot.si/2017/05/0patching-worst-windows-remote-code.html - https://twitter.com/natashenka/status/861748397409058816 - https://technet.m
/0patching-worst-windows-remote-code.html - https://twitter.com/natashenka/status/861748397409058816 - https://technet.microsoft.com/library/security/4022344 - http://www.securityfocus.com/bid/98330
CVE ID: CVE-2017-0291 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:55.898Z Vendors: Microsoft Corporation Products: Windows PDF Problem Types: Remote Code Execution Description: Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0292. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0291 - http://www.securityfocus.com/bid
s: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0291 - http://www.securityfocus.com/bid/98835
CVE ID: CVE-2017-0292 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:55.863Z Vendors: Microsoft Corporation Products: Windows PDF Problem Types: Remote Code Execution Description: Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0291. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98836 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-201
s: - http://www.securityfocus.com/bid/98836 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0292 - http://www.securitytracker.com/id/1038678
CVE ID: CVE-2017-0293 State: PUBLISHED Published: 2017-08-08T21:00:00Z Last Updated: 2024-09-16T22:55:43.242Z Vendors: Microsoft Corporation Products: Microsoft Windows PDF Problem Types: Remote Code Execution Description: Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability when it improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100039 - http://www.securitytracker.com/id/1039092
VE Program Container: References: - http://www.securityfocus.com/bid/100039 - http://www.securitytracker.com/id/1039092 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0293
CVE ID: CVE-2017-0294 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:55.825Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Remote Code Execution Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute remote code when Windows fails to properly handle cabinet files, aka "Windows Remote Code Execution Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98837 - https://portal.msrc.microsoft.com/en-US/securit
rogram Container: References: - http://www.securityfocus.com/bid/98837 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0294
CVE ID: CVE-2017-0295 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:55.885Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Tampering Description: Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\Users\DEFAULT folder structure, aka "Windows Default Folder Tampering Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0295 - http://www.securityfocus.com/bid/98904 - http://www.securitytracker.com/id/1038674
CVE ID: CVE-2017-0296 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:55.857Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Elevation of Privilege Description: Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows TDX Elevation of Privilege Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidan
Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0296 - http://www.securityfocus.com/bid/98839
CVE ID: CVE-2017-0297 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:56.529Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-20
ity than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0299, CVE-2017-0300. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98840 - http://www.securitytracker.com/id/1038671 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0297
CVE ID: CVE-2017-0298 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:55.877Z Vendors: Microsoft Corporation Products: Windows COM Problem Types: Elevation of Privilege Description: A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, when configured to run as the interactive user, allows an authenticated attacker to run arbitrary code in another user's session, aka "Windows COM Session Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://port
ion Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0298 - http://www.securityfocus.com/bid/98841
CVE ID: CVE-2017-0299 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:56.386Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482
lnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0300, and CVE-2017-0297. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038671 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0299 - https://www.exploit-db.com/exploits/42219/ - http://www.securityfocus.com/bid/98884
CVE ID: CVE-2017-0300 State: PUBLISHED Published: 2017-06-15T01:00:00 Last Updated: 2024-08-05T13:03:55.847Z Vendors: Microsoft Corporation Products: Microsoft Windows Problem Types: Information Disclosure Description: The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482
lnerability than CVE-2017-8491, CVE-2017-8490, CVE-2017-8489, CVE-2017-8488, CVE-2017-8485, CVE-2017-8483, CVE-2017-8482, CVE-2017-8481, CVE-2017-8480, CVE-2017-8478, CVE-2017-8479, CVE-2017-8476, CVE-2017-8474, CVE-2017-8469, CVE-2017-8462, CVE-2017-0299, and CVE-2017-0297. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98901 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0300 - https://www.exploit-db.com/exploits/42244/
CVE ID: CVE-2017-0301 State: PUBLISHED Published: 2017-12-21T17:00:00Z Last Updated: 2024-09-16T16:24:18.404Z Vendors: F5 Networks, Inc. Products: BIG-IP APM Problem Types: Predictable Resource Location Description: In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application resources and backend servers are unaffected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040040 - https://support.f5.com/csp/article/K54
CVE Program Container: References: - http://www.securitytracker.com/id/1040040 - https://support.f5.com/csp/article/K54358225
CVE ID: CVE-2017-0302 State: PUBLISHED Published: 2017-05-09T15:00:00 Last Updated: 2024-08-05T13:03:56.335Z Vendors: F5 Networks, Inc. Products: BIG-IP APM Problem Types: BIG-IP APM may be disrupted if a URL less than 16 characters is requested. Description: In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038408 - https://support.f5.com/csp/article/K87141725
CVE ID: CVE-2017-0303 State: PUBLISHED Published: 2017-10-27T14:00:00Z Last Updated: 2024-09-16T23:00:41.490Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe Problem Types: denial of service Description: In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restartin
ding to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K30201296 - http://www.securityfocus.com/bid/101612 - http://www.securitytracker.com/id/1039674
CVE ID: CVE-2017-0304 State: PUBLISHED Published: 2017-12-21T17:00:00Z Last Updated: 2024-09-16T17:53:20.416Z Vendors: F5 Networks, Inc. Products: BIG-IP AFM Problem Types: Input Validation Description: A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampered with and impact the Configuration Utility until there is a resync of the rules. Traffic processing and the live firewall rules in use are not affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102332 - https://support.f5.com/csp/article/K39428424 - http://ww
tainer: References: - http://www.securityfocus.com/bid/102332 - https://support.f5.com/csp/article/K39428424 - http://www.securitytracker.com/id/1040041
CVE ID: CVE-2017-0305 State: PUBLISHED Published: 2017-04-06T14:00:00 Last Updated: 2024-08-05T13:03:56.813Z Vendors: F5 Networks Products: SSL Intercept iApp version Problem Types: remote command execution Description: F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on the system when deployed using the Explicit Proxy feature plus SNAT Auto Map option for egress traffic. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K53244431
CVE ID: CVE-2017-0306 State: PUBLISHED Published: 2017-03-08T01:00:00 Last Updated: 2024-08-05T13:03:56.405Z Vendors: Nvidia Corporation Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-34132950. References: N-CVE-2017-0306. Additional Analyst Notes: - CVE Program Container: References: -
. Android ID: A-34132950. References: N-CVE-2017-0306. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037968 - http://www.securityfocus.com/bid/96723 - http://nvidia.custhelp.com/app/answers/detail/a_id/4561 - https://source.android.com/security/bulletin/2017-03-01.html
CVE ID: CVE-2017-0307 State: PUBLISHED Published: 2017-03-08T01:00:00 Last Updated: 2024-08-05T13:03:56.638Z Vendors: Nvidia Corporation Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33177895. References: N-CVE-2017-0307. Additional Analyst Notes: - CVE Program Container: References: -
. Android ID: A-33177895. References: N-CVE-2017-0307. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037968 - http://www.securityfocus.com/bid/96809 - http://nvidia.custhelp.com/app/answers/detail/a_id/4561 - https://source.android.com/security/bulletin/2017-03-01.html
CVE ID: CVE-2017-0308 State: PUBLISHED Published: 2017-02-15T23:00:00 Last Updated: 2024-08-05T13:03:56.467Z Vendors: Nvidia Corporation Products: Windows GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where untrusted input is used for buffer size calculation leading to denial of service or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4398
CVE ID: CVE-2017-0309 State: PUBLISHED Published: 2017-02-15T23:00:00 Last Updated: 2024-08-05T13:03:56.529Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service and possible Escalation of Privileges Description: All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may cause improper memory allocation leading to a denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4398
CVE ID: CVE-2017-0310 State: PUBLISHED Published: 2017-02-15T23:00:00 Last Updated: 2024-08-05T13:03:56.436Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service Description: All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing unprivileged user to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4398
CVE ID: CVE-2017-0311 State: PUBLISHED Published: 2017-02-15T23:00:00 Last Updated: 2024-08-05T13:03:56.550Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of service or possible escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4398
CVE ID: CVE-2017-0312 State: PUBLISHED Published: 2017-02-15T23:00:00 Last Updated: 2024-08-05T13:03:56.640Z Vendors: Nvidia Corporation Products: Windows GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeID 0x100008b where user provided input is used as the limit for a loop may lead to denial of service or potential escalation of privileges Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4398 - https://www.exploit-db.com/exploits/41364/
CVE ID: CVE-2017-0313 State: PUBLISHED Published: 2017-02-15T23:00:00 Last Updated: 2024-08-05T13:03:57.018Z Vendors: Nvidia Corporation Products: Windows GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmitCommandVirtual DDI (DxgkDdiSubmitCommandVirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/deta
privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4398 - https://www.exploit-db.com/exploits/41365/