CVE-2016-7386

{"id": "CVE-2016-7386", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2016-11-08T20:59:12.257", "references": [{"url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4247", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@nvidia.com"}, {"url": "http://www.securityfocus.com/bid/93982", "tags": ["Third Party Advisory", "VDB Entry"], "source": "psirt@nvidia.com"}, {"url": "https://support.lenovo.com/us/en/solutions/LEN-10822", "tags": ["Third Party Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://www.exploit-db.com/exploits/40656/", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "psirt@nvidia.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4 which may lead to leaking of kernel memory contents to user space through an uninitialized buffer."}, {"lang": "es", "value": "Para los productos NVIDIA Quadro, NVS y GeForce, NVIDIA Windows GPU Display Driver R340 en versiones anteriores a 342.00 y R375 en versiones anteriores a 375.63 contiene una vulnerabilidad en el controlador de la capa de modo kernel (nvlddmkm.sys) para DxgDdiEscape ID 0x70000D4 lo que podr\u00eda conducir al filtrado de contenidos de la memoria del kernel al espacio de usuario a trav\u00e9s de un b\u00fafer no iniciado."}], "lastModified": "2019-03-07T14:39:19.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61D45869-80B6-43BA-B8A9-F62F094192AC", "versionEndExcluding": "342.00", "versionStartIncluding": "340"}, {"criteria": "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AE75B76-5DC6-4700-AAF5-80B409287BB1", "versionEndExcluding": "375.63", "versionStartIncluding": "375"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@nvidia.com"}