2 lines
2.8 KiB
JSON
2 lines
2.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"NVIDIA GPU Display Driver","vendor":"NVIDIA","versions":[{"status":"affected","version":"All"}]}],"source":"psirt@nvidia.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*","matchCriteriaId":"18C44215-3940-4A5C-BC6F-0F0E4B7A91DF","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the product uses untrusted input when calculating or using an array index, which may lead to escalation of privileges or denial of service."},{"lang":"es","value":"NVIDIA Windows GPU Display Driver, todas las versiones, contiene una vulnerabilidad en el manejador de la capa del modo kernel (biblioteca nvlddmkm.sys) para la función DxgkDdiEscape en la que el producto usa una entrada no confiable cuando calcula o utiliza un índice de matriz, lo que puede conllevar a una escalada de privilegios o una denegación de Servicio."}],"id":"CVE-2019-5692","lastModified":"2026-06-17T02:38:04.743","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-11-09T02:15:11.723","references":[{"source":"psirt@nvidia.com","tags":["Patch","Vendor Advisory"],"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/4907"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/4907"}],"sourceIdentifier":"psirt@nvidia.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-129"}],"source":"nvd@nist.gov","type":"Primary"}]}
|