« Volver al listado

CVE-2020-5964

Estado: ModificadaAlta (7.8)—

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-5964",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@nvidia.com",
      "affectedData": [
        {
          "vendor": "NVIDIA",
          "product": "NVIDIA GPU Display Driver",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-06-25T00:15:10.383",
  "references": [
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5031",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@nvidia.com"
    },
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5038",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@nvidia.com"
    },
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5031",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5038",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-345"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure."
    },
    {
      "lang": "es",
      "value": "NVIDIA Windows GPU Display Driver, todas las versiones, contiene una vulnerabilidad en el componente service host, en el que se puede pasar por alto la comprobación de integridad de los recursos de la aplicación. Tal ataque puede conllevar a una ejecución de código, denegación de servicio o divulgación de información"
    }
  ],
  "lastModified": "2026-06-17T03:22:31.950",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:quadro_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F3BB4C3-E77E-4841-A436-E9033FEE5011",
              "versionEndExcluding": "392.61",
              "versionStartIncluding": "390"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:quadro_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "021A11A4-23AE-4C5F-A3F0-357481BC1C91",
              "versionEndExcluding": "426.78",
              "versionStartIncluding": "418"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:quadro_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9195AEC-3EB3-4991-947B-E68817B8902A",
              "versionEndExcluding": "443.18",
              "versionStartIncluding": "440"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:quadro_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FCA19971-9415-4D00-9090-21788E753CEE",
              "versionEndExcluding": "451.48",
              "versionStartIncluding": "450"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nvidia:quadro:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B56258A7-E289-426E-B8D1-309CCB54E893"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:tesla_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C11F4D2B-A251-4D15-9902-9E2AB23C58D5",
              "versionEndExcluding": "426.78",
              "versionStartIncluding": "418"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:tesla_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA8EEDE5-CF37-4CC3-B556-EA329027CC4C",
              "versionEndExcluding": "443.18",
              "versionStartIncluding": "440"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:tesla_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6A65412-DD0C-410A-AFFA-3A7774053B5A",
              "versionEndExcluding": "451.48",
              "versionStartIncluding": "450"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nvidia:tesla:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "75C6DE26-88F2-428E-B761-754BD027E015"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFF79957-D4AF-4CCD-8F55-7CA9829FD0B1",
              "versionEndExcluding": "3.20.4"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:nvs_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E71ACEF-7A5B-4C77-81A5-539BB4D86E47",
              "versionEndExcluding": "392.61",
              "versionStartIncluding": "390"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:nvs_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A611598-0D67-49A8-B6A5-87EE823E2619",
              "versionEndExcluding": "426.78",
              "versionStartIncluding": "418"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:nvs_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01F0E734-BA49-4119-998C-142860430AB4",
              "versionEndExcluding": "443.18",
              "versionStartIncluding": "440"
            },
            {
              "criteria": "cpe:2.3:o:nvidia:nvs_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40537521-3B8D-4B2D-94D5-B79C219D7BF6",
              "versionEndExcluding": "451.48",
              "versionStartIncluding": "450"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nvidia:nvs:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C60D8825-B4F5-47DC-ACC3-137D6FC5F12F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nvidia:geforce_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8472A4C6-922C-44F5-AF22-1BD3F45E70CA",
              "versionEndExcluding": "451.48",
              "versionStartIncluding": "450"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:nvidia:geforce:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6B30520A-D378-4CC8-812D-3B443740D6E3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@nvidia.com"
}