The version of the NVIDIA GPU display driver installed on the remote Windows host is 340.x, 341.x, or 342.x prior to 342.00, or 375.x prior to 375.63. It is, therefore, affected by multiple vulnerabilities :

  - An array-indexing error exists in nvlddmkm.sys due to     improper validation of input. A local attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code with elevated     privileges. (CVE-2016-7381)

  - A flaw exists in nvlddmkm.sys due to missing permission     checks. A local attacker can exploit this to disclose     arbitrary memory contents and gain elevated privileges.
    (CVE-2016-7382)

  - A flaw exists in nvlddmkm.sys when handling memory     mapping that allows a local attacker to cause a denial     of service condition or the execution of arbitrary code     with elevated privileges. (CVE-2016-7383)

  - A flaw exists in nvlddmkm.sys when handling     UVMLiteController device IO control input and output     lengths. A local attacker can exploit this to execute     arbitrary code with elevated privileges. (CVE-2016-7384)

  - An untrusted pointer dereference flaw exists in     nvlddmkm.sys when handling DxgDdiEscape ID 0x700010d. A     local attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code     with elevated privileges. (CVE-2016-7385)

  - A flaw exists in nvlddmkm.sys when handling DxgDdiEscape     ID 0x70000d4 that allows a local attacker to disclose     uninitialized memory contents. (CVE-2016-7386)

  - A flaw exists in nvlddmkm.sys when handling DxgDdiEscape     ID 0x600000d that allows a local attacker to cause a     denial of service condition or the execution of     arbitrary code with elevated privileges. (CVE-2016-7387)

  - A NULL pointer dereference flaw exists in nvlddmkm.sys     that allows a local attacker to cause a denial of     service condition or the execution of arbitrary code     with elevated privileges in certain unsafe     configurations. (CVE-2016-7388)

  - An array-indexing error exists in nvlddmkm.sys when     handling DxgDdiEscape ID 0x7000194 that allows a local     attacker to cause a denial of service condition or the     execution of arbitrary code with elevated privileges.
    (CVE-2016-7390)

  - A flaw exists in nvlddmkm.sys when handling DxgDdiEscape     ID 0x100010b that allows a local attacker to cause a     denial of service condition or the execution of     arbitrary code with elevated privileges. (CVE-2016-7391)

  - A flaw exists in nvlddmkm.sys when handling DxgDdiEscape     ID 0x7000014 that allows a local attacker to cause a     denial of service condition or the execution of     arbitrary code with elevated privileges. (CVE-2016-8805)

  - An untrusted pointer dereference flaw exists in     nvlddmkm.sys when handling DxgDdiEscape ID 0x5000027     that allows a local attacker to cause a denial of     service condition or the execution of arbitrary code     with elevated privileges. (CVE-2016-8806)

  - A stack-based buffer overflow condition exists in     nvlddmkm.sys when handling DxgDdiEscape ID 0x10000e9     that allows a local attacker to cause a denial of     service condition or the execution of arbitrary code     with elevated privileges. (CVE-2016-8807)

  - A buffer overflow condition exists in nvlddmkm.sys when     handling DxgDdiEscape ID 0x70000d that allows a local     attacker to cause a denial of service condition or the     execution of arbitrary code with elevated privileges.
    (CVE-2016-8808)

  - A buffer overflow condition exists in nvlddmkm.sys when     handling DxgDdiEscape ID 0x70001b2 that allows a local     attacker to cause a denial of service condition or the     execution of arbitrary code with elevated privileges.
    (CVE-2016-8809)

  - A buffer overflow condition exists in nvlddmkm.sys when     handling DxgDdiEscape ID 0x100009a that allows a local     attacker to cause a denial of service condition or the     execution of arbitrary code with elevated privileges.
    (CVE-2016-8810)

  - A flaw exists in nvlddmkm.sys driver when handling     DxgDdiEscape ID 0x7000170 that allows a local attacker     to cause a denial of service condition or the execution     of arbitrary code with elevated privileges.
    (CVE-2016-8811)

  - A stack-based overflow condition exists in     nvstreamkms.sys when handling executable paths. A local     attacker can exploit this to execute arbitrary code with     elevated privileges. Note that this vulnerability only     affects systems that also have GeForce Experience     software installed. (CVE-2016-8812)

リモートのWindowsホストにインストールされているNVIDIA GPUディスプレイドライバーのバージョンは、340.x、341.x、342.00より前の342.x、375.63より前の375.xです。したがって、以下の複数の脆弱性による影響を受けます。

  - An array-indexing error exists in nvlddmkm.sys due to improper validation of input. A local attacker can exploit this to cause a denial of service condition or the execution of arbitrary code with elevated privileges. (CVE-2016-7381)

  - A flaw exists in nvlddmkm.sys due to missing permission checks. ローカルの攻撃者がこの脆弱性を悪用し、任意のメモリコンテンツを漏えいし、昇格した権限を得る可能性があります。
    (CVE-2016-7382)

  - A flaw exists in nvlddmkm.sys when handling memory mapping that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges. (CVE-2016-7383)

  - A flaw exists in nvlddmkm.sys when handling UVMLiteController device IO control input and output lengths. A local attacker can exploit this to execute arbitrary code with elevated privileges. (CVE-2016-7384)

  - An untrusted pointer dereference flaw exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x700010d. A local attacker can exploit this to cause a denial of service condition or the execution of arbitrary code with elevated privileges. (CVE-2016-7385)

  - A flaw exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x70000d4 that allows a local attacker to disclose uninitialized memory contents. (CVE-2016-7386)

  - A flaw exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x600000d that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges. (CVE-2016-7387)

  - A NULL pointer dereference flaw exists in nvlddmkm.sys that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges in certain unsafe configurations. (CVE-2016-7388)

  - An array-indexing error exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x7000194 that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges.
    (CVE-2016-7390)

  - A flaw exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x100010b that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges. (CVE-2016-7391)

  - A flaw exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x7000014 that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges. (CVE-2016-8805)

  - An untrusted pointer dereference flaw exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x5000027 that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges. (CVE-2016-8806)

  - A stack-based buffer overflow condition exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x10000e9 that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges. (CVE-2016-8807)

  - A buffer overflow condition exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x70000d that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges.
    (CVE-2016-8808)

  - A buffer overflow condition exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x70001b2 that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges.
    (CVE-2016-8809)

  - A buffer overflow condition exists in nvlddmkm.sys when handling DxgDdiEscape ID 0x100009a that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges.
    (CVE-2016-8810)

  - A flaw exists in nvlddmkm.sys driver when handling DxgDdiEscape ID 0x7000170 that allows a local attacker to cause a denial of service condition or the execution of arbitrary code with elevated privileges.
    (CVE-2016-8811)

  - A stack-based overflow condition exists in nvstreamkms.sys when handling executable paths. ローカルの攻撃者がこの脆弱性を悪用し、昇格した権限で任意のコードを実行する可能性があります。Note that this vulnerability only affects systems that also have GeForce Experience software installed. (CVE-2016-8812)

遠端 Windows 主機上安裝的 NVIDIA GPU 顯示驅動程式版本為 340.x 版、341.x 版，或 342.00 之前的 342.x 版，或 375.63 之前的 375.x 版。因此，會受到多個弱點影響：- nvlddmkm.sys 中存在一個陣列檢索錯誤，這是因為不當驗證輸入所致。本機攻擊者可惡意利用此錯誤，藉此引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-7381) - nvlddmkm.sys 中存在一個缺陷，這是因為缺少權限檢查所致。本機攻擊者可惡意利用此弱點，洩漏任意記憶體內容並取得提升的權限。(CVE-2016-7382) - 處理記憶體對應時，nvlddmkm.sys 中存在一個缺陷，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-7383) - 處理 UVMLiteController 裝置 IO control 輸入和輸出長度時，nvlddmkm.sys 中存在一個缺陷。本機攻擊者可惡意利用此弱點，以提升的權限執行任意程式碼。(CVE-2016-7384) - 處理 DxgDdiEscape ID 0x700010d 時，nvlddmkm.sys 存在一個未受信任的指標解除參照缺陷。本機攻擊者可惡意利用此錯誤，藉此引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-7385) - 處理 DxgDdiEscape ID 0x70000d4 時，nvlddmkm.sys 中存在一個缺陷，讓本機攻擊者得以洩漏未初始化的記憶體內容。(CVE-2016-7386) - 處理 DxgDdiEscape ID 0x600000d 時，nvlddmkm.sys 中存在一個缺陷，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-7387) - nvlddmkm.sys 中存在一個 NULL 指標解除參照缺陷，讓本機攻擊者得以引發拒絕服務情形，或是在某些不安全的組態中以提升的權限執行任意程式碼。(CVE-2016-7388) - 處理 DxgDdiEscape ID 0x7000194 時，nvlddmkm.sys 中存在一個陣列檢索錯誤，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-7390) - 處理 DxgDdiEscape ID 0x100010b 時，nvlddmkm.sys 中存在一個缺陷，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-7391) - 處理 DxgDdiEscape ID 0x7000014 時，nvlddmkm.sys 中存在一個缺陷，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-8805) - 處理 DxgDdiEscape ID 0x5000027 時，nvlddmkm.sys 中存在一個未受信任的指標解除參照缺陷，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-8806) - 處理 DxgDdiEscape ID 0x10000e9 時，nvlddmkm.sys 中存在一個堆疊型緩衝區溢位情形，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-8807) - 處理 DxgDdiEscape ID 0x70000d 時，nvlddmkm.sys 中存在一個緩衝區溢位情形，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-8808) - 處理 DxgDdiEscape ID 0x70001b2 時，nvlddmkm.sys 中存在一個緩衝區溢位情形，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-8809) - 處理 DxgDdiEscape ID 0x100009a 時，nvlddmkm.sys 中存在一個緩衝區溢位情形，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-8810) - 處理 DxgDdiEscape ID 0x7000170 時，nvlddmkm.sys 驅動程式中存在一個缺陷，讓本機攻擊者得以引發拒絕服務情形或是以提升的權限執行任意程式碼。(CVE-2016-8811) - 處理可執行檔路徑時，nvstreamkms.sys 中存在一個堆疊型溢位情形。本機攻擊者可惡意利用此弱點，以提升的權限執行任意程式碼。請注意，此弱點只會影響同樣有安裝 GeForce Experience 軟體的系統。(CVE-2016-8812)

远程 Windows 主机上安装的 NVIDIA GPU 显示驱动程序版本为低于 342.00 的 340.x、341.x 或 342.x，或低于 375.63 的 375.x。因而会受到多个漏洞的影响：- 由于未正确验证输入，nvlddmkm.sys 中存在数组索引错误。本地攻击者可利用此问题，以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-7381) - 由于缺失权限检查，nvlddmkm.sys 中存在缺陷。本地攻击者可利用此问题，泄露任意内存内容和获取提升的权限。(CVE-2016-7382) - 处理内存映射时，nvlddmkm.sys 中存在缺陷，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-7383) - 处理 UVMLiteController 设备 IO 控制输入和输出长度时，nvlddmkm.sys 中存在缺陷。本地攻击者可利用此问题以提升的权限执行任意代码。(CVE-2016-7384) - 处理 DxgDdiEscape ID 0x700010d 时，nvlddmkm.sys 中存在不受信任的指针取消引用缺陷。本地攻击者可利用此问题，以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-7385) - 处理 DxgDdiEscape ID 0x70000d4 时，nvlddmkm.sys 中存在缺陷，允许本地攻击者泄露初始化的内存内容。(CVE-2016-7386) - 处理 DxgDdiEscape ID 0x600000d 时，nvlddmkm.sys 中存在缺陷，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-7387) - nvlddmkm.sys 中存在空指针取消引用缺陷，在某些不安全配置中，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-7388) - 在处理 DxgDdiEscape ID 0x7000194 时，nvlddmkm.sys 中存在数组索引错误，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-7390) - 处理 DxgDdiEscape ID 0x100010b 时，nvlddmkm.sys 中存在缺陷，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-7391) - 处理 DxgDdiEscape ID 0x7000014 时，nvlddmkm.sys 中存在缺陷，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-8805) - 处理 DxgDdiEscape ID 0x5000027 时，nvlddmkm.sys 中存在不受信任的指针取消引用缺陷，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-8806) - 处理 DxgDdiEscape ID 0x10000e9 时，nvlddmkm.sys 中存在基于堆栈的缓冲区溢出情况，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-8807) - 处理 DxgDdiEscape ID 0x70000d 时，nvlddmkm.sys 中存在缓冲区溢出情况，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-8808) - 处理 DxgDdiEscape ID 0x70001b2 时，nvlddmkm.sys 中存在缓冲区溢出情况，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-8809) - 处理 DxgDdiEscape ID 0x100009a 时，nvlddmkm.sys 中存在缓冲区溢出情况，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-8810) - 处理 DxgDdiEscape ID 0x7000170 时，nvlddmkm.sys 驱动程序中存在缺陷，允许本地攻击者以提升的权限造成拒绝服务情况或执行任意代码。(CVE-2016-8811) - 处理可执行路径时，nvlddmkm.sys 中存在基于堆栈的缓冲区溢出情况。本地攻击者可利用此问题以提升的权限执行任意代码。请注意，该漏洞仅影响也安装有 GeForce Experience 软件的系统。(CVE-2016-8812)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
94576	NVIDIA Windows GPU Display Driver 340.x / 341.x / 342.x < 342.00 / 375.x < 375.63 Multiple Vulnerabilities	Nessus	Windows	2016/11/4	2023/4/5	high
94576	NVIDIA Windows GPUディスプレイドライバー340.x/341.x/342.x < 342.00/375.x < 375.63の複数の脆弱性	Nessus	Windows	2016/11/4	2023/4/5	high
94576	NVIDIA Windows GPU 顯示驅動程式 340.x / 341.x / 342.x < 342.00 / 375.x < 375.63 多個弱點	Nessus	Windows	2016/11/4	2023/4/5	high
94576	NVIDIA Windows GPU 显示驱动程序 340.x / 341.x / 342.x < 342.00 / 375.x < 375.63 多个漏洞	Nessus	Windows	2016/11/4	2023/4/5	high

検出

プラグインの検索

high

high

high

high