CVE-2013-0109

{"id": "CVE-2013-0109", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-04-08T16:55:01.977", "references": [{"url": "http://www.kb.cert.org/vuls/id/957036", "tags": ["US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.nvidia.com/object/product-security.html", "tags": ["Patch", "Vendor Advisory"], "source": "cret@cert.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service (memory overwrite) via a crafted application."}, {"lang": "es", "value": "El controlador NVIDIA anterior a v307.78, y Release v310 anterior a v311.00, en el controlador del servicio NVIDIA Display en Windows, no controla correctamente las excepciones, lo que permite a usuarios locales conseguir privilegios o causar una denegaci\u00f3n de servicio (sobrescritura de memoria) a trav\u00e9s de una aplicaci\u00f3n manipulada."}], "lastModified": "2013-04-09T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:display_driver:*:-:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "88D59F8E-D8AC-4D09-8661-5E1E1EE203F4", "versionEndIncluding": "307.00"}, {"criteria": "cpe:2.3:a:nvidia:display_driver:310.00:-:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "3A61DA00-91EE-4E56-9DE1-7D7E50C766AC"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}