リモートのWindowsホストにインストールされているNVIDIA GPUディスプレイドライバーのバージョンが、377.35より前の375.x、または382.05より前の382.xです。したがって、以下の複数の脆弱性による影響を受けます。

  - An uninitialized pointer flaw exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper validation of user-supplied input. ローカルの攻撃者がこの脆弱性を悪用し、サービス拒否状態を引き起こす可能性や昇格した権限を取得する可能性があります。
    (CVE-2017-0341)

  - An out-of-bounds access error exists in the kernel mode layer (nvlddmkm.sys) handler due to certain incorrect calculations. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0342)

  - A race condition exists in the kernel mode layer (nvlddmkm.sys) handler due to improper synchronization of certain functions. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0343)

  - An unspecified flaw exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape that allows a local attacker to access arbitrary physical memory and gain elevated privileges. (CVE-2017-0344)

  - An out-of-bounds access error exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper validation of user-supplied array size input. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0345)

  - A buffer overflow condition exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper validation of user-supplied input. ローカルの攻撃者がこの脆弱性を悪用し、サービス拒否状態を引き起こす可能性や昇格した権限を取得する可能性があります。
    (CVE-2017-0346)

  - An array-indexing error exists in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape due to improper validation of user-supplied input. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0347)

  - A NULL pointer dereference flaw exists in the kernel mode layer (nvlddmkm.sys) handler due to improper validation of user-supplied input. ローカルの攻撃者がこの脆弱性を悪用し、サービス拒否状態を引き起こす可能性や昇格した権限を取得する可能性があります。
    (CVE-2017-0348)

  - An invalid pointer flaw exists in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape due to improper validation of a user-supplied pointer before it is dereferenced for a write operation. A local attacker can exploit this to cause a denial of service condition or potentially to gain elevated privileges. (CVE-2017-0349)

  - A flaw exists in the kernel mode layer handler for DxgDdiEscape due to the driver improperly locking on certain conditions. A local attacker can exploit this to cause a denial of service condition. (CVE-2017-0353)

  - A flaw exists in the kernel mode layer handler for DxgkDdiEscape where a call to certain functions requiring lower IRQL can be made under raised IRQL. A local attacker can exploit this to cause a denial of service condition. (CVE-2017-0354)

  - A flaw exists in the kernel mode layer handler for DxgkDdiEscape due to accessing paged memory while holding a spin lock. ローカルの攻撃者がこの脆弱性を悪用し、サービス拒否状態を引き起こす可能性があります。
    (CVE-2017-0355)

検出

NVIDIA Windows GPUディスプレイドライバー375.x < 377.35/382.x < 382.05の複数の脆弱性

high Nessus プラグイン ID 100259

バージョン 1.7