Vulnerability CVE-2016-3161


Published: 2016-11-08

Description:
For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system at the system/user privilege level. The CVE-2016-3161 ID is for the GameStream unquoted service path.

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.2/10
10/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Nvidia -> Geforce experience 

 References:
http://nvidia.custhelp.com/app/answers/detail/a_id/4213
http://www.securityfocus.com/bid/93251
https://support.lenovo.com/us/en/product_security/ps500070

Copyright 2020, cxsecurity.com

 

Back to Top