CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: all versions of nvidia windows gpu display driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the submitcommandvirtual ddi (dxgkddisubmitcommandvirtual) where untrusted input is used to reference memory outside of the intended boundary of the buffer leading to denial of service or escalation of privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-02-15
Last Modified Date: 2017-02-23