CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Input Validation
Summary: all versions of the nvidia windows gpu display driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for dxgkddiescape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-05-09
Last Modified Date: 2017-05-25