リモートのWindowsホストにインストールされているNVIDIA GPUディスプレイドライバーのバージョンが、376.67より前の375.x、または378.52より前の378.xです。
したがって、以下の複数の脆弱性による影響を受けます。

  - Multiple overflow conditions exist in the kernel mode layer handler (nvlddmkm.sys) for DxgkDdiEscape due to a failure to properly calculate the input buffer size. ローカルの攻撃者がこれらを悪用し、サービス拒否状態や任意のコードの実行を引き起こす可能性があります。
    (CVE-2017-0308, CVE-2017-0324)

  - Multiple integer overflow conditions exist in the kernel mode layer handler that allow a local attacker to cause a denial of service condition or the execution of arbitrary code. (CVE-2017-0309)

  - A flaw exists in the kernel mode layer handler due to improper access controls that allows a local attacker to cause a denial of service condition. (CVE-2017-0310)

  - A flaw exists in the kernel mode layer handler due to improper access controls that allows a local attacker to cause a denial of service condition or the execution of arbitrary code. (CVE-2017-0311)

  - An overflow condition exists in the kernel mode layer handler for DxgDdiEscape ID 0x100008B due to improper validation of input before setting the limits for a loop. A local attacker can exploit this to cause a denial of service condition or potentially gain elevated privileges. (CVE-2017-0312)

  - Multiple out-of-bounds write flaws exist within the DxgkDdiSubmitCommandVirtual() function in the kernel mode layer handler due to improper validation of certain size and length values. A local attacker can exploit these to cause a denial of service condition or the execution of arbitrary code. (CVE-2017-0313, CVE-2017-0314)

  - A flaw exists in the kernel mode layer handler for DxgkDdiEscape due to accessing an invalid object pointer that allows a local attacker to execute arbitrary code. (CVE-2017-0315)

  - A flaw exists in the NVIDIA GPU and GeForce Experience Installer due to improper file permissions on the package extraction path. A local attacker can exploit this to manipulate extracted files and thereby potentially gain elevated privileges. (CVE-2017-0317)

  - Multiple flaws exist in the kernel mode layer handler due to improper handling of unspecified values that allow a local attacker to cause a denial of service condition.
    (CVE-2017-0319, CVE-2017-0320)

  - Multiple NULL pointer dereference flaws exist in the kernel mode layer handler due to improper validation of certain input. A local attacker can exploit these to cause a denial of service condition or potentially execute arbitrary code. (CVE-2017-0321, CVE-2017-0323)

  - An array-indexing error exists in the kernel mode layer handler due to improper validation of certain input. ローカルの攻撃者がこの脆弱性を悪用し、サービス拒否状態を引き起こしたり、昇格した権限を取得したりする可能性があります。
    (CVE-2017-0322)

検出

NVIDIA Windows GPUディスプレイドライバー375.x < 376.67/378.x < 378.52の複数の脆弱性

high Nessus プラグイン ID 97386

バージョン 1.7