CVE-2016-8824 — HIGH (7.8) — White Hats Nepal

Vulnerability Description

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where improper access controls allow a regular user to write a part of the registry intended for privileged users only, leading to escalation of privileges.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Nvidia	Gpu Driver	-
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-284

References

http://nvidia.custhelp.com/app/answers/detail/a_id/4278PatchVendor Advisory
http://www.securityfocus.com/bid/95015Third Party AdvisoryVDB Entry
http://nvidia.custhelp.com/app/answers/detail/a_id/4278PatchVendor Advisory
http://www.securityfocus.com/bid/95015Third Party AdvisoryVDB Entry

FAQ

What is CVE-2016-8824?

CVE-2016-8824 is a vulnerability with a CVSS score of 7.8 (HIGH). All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where improper access controls allow a regular user to write ...

How severe is CVE-2016-8824?

CVE-2016-8824 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-8824?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Gpu Driver, Microsoft Windows.