リモートのWindowsホストにインストールされているNVIDIAグラフィックスドライバーのバージョンは、342.00より前の34x.x、369.73より前の367.x、369.71（GRID）より前の367.x、375.63より前の375.xです。したがって、以下の複数の脆弱性による影響を受けます。

  - Multiple privilege escalation vulnerabilities exist in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to a NULL pointer dereference flaw. ローカルの攻撃者がこの脆弱性を悪用し、サービス拒否状態や権限の昇格を引き起こす可能性があります。
    (CVE-2016-8813, CVE-2016-8814)

  - Multiple privilege escalation vulnerabilities exist in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper validation of user-supplied input used for the index to an array. A local attacker can exploit this to cause a denial of service condition or an escalation of privileges. (CVE-2016-8815, CVE-2016-8815)

  - A privilege escalation vulnerability exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper validation of user-supplied input to the memcpy() function. A local attacker can exploit this to cause a buffer overflow, resulting in a denial of service condition or an escalation of privileges. (CVE-2016-8817)

  - A privilege escalation vulnerability exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper validation of user-supplied input. A local attacker can exploit this to cause a denial of service condition or an escalation of privileges. (CVE-2016-8818)

  - A privilege escalation vulnerability exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to improper handling of objects in memory. A local attacker can exploit this to cause a denial of service condition or an escalation of privileges. (CVE-2016-8819)

  - A flaw exists in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape due to a failure to check a function return value. A local attacker can exploit this to disclose sensitive information or cause a denial of service condition. (CVE-2016-8820)

検出

NVIDIA Windows GPUディスプレイドライバー34x.x < 342.00/367.x < 369.73/367.x < 369.71（GRID）/375.x < 375.63複数の脆弱性

high Nessus プラグイン ID 95370

バージョン 1.8