Multiple vulnerabilities in NVIDIA GeForce Experience

Published: 2018-09-03

Risk	Low
Patch available	YES
Number of vulnerabilities	3
CVE-ID	CVE-2018-6257 CVE-2018-6258 CVE-2018-6259
CWE-ID	CWE-284 CWE-300 CWE-200
Exploitation vector	Local
Public exploit	N/A
Vulnerable software Subscribe	GeForce Experience Client/Desktop applications / Other client software
Vendor	nVidia

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Improper access control

EUVDB-ID: #VU14597

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2018-6257

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to improper access control when GameStream is enabled. A local attacker can cause the service to crash or gain elevated privileges.

Mitigation

Update to version 3.14.1.

Vulnerable software versions

GeForce Experience: 3.0 - 3.14.0

CPE2.3

External links

http://nvidia.custhelp.com/app/answers/detail/a_id/4685

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Man-in-the-middle attack

EUVDB-ID: #VU14598

Risk: Low

CVSSv3.1: 4.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2018-6258

CWE-ID: CWE-300 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')

Exploit availability: No

Description

The vulnerability allows a local attacker to conduct man-in-the-middle attack on the target system.

The weakness exists due to an error during GameStream installation. A local attacker can conduct MITM-attack and gain access to important data.

Mitigation

Update to version 3.14.1.

Vulnerable software versions

GeForce Experience: 3.0 - 3.14.0

CPE2.3

External links

http://nvidia.custhelp.com/app/answers/detail/a_id/4685

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Information disclosure

EUVDB-ID: #VU14599

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2018-6259

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a local attacker to obtain potentially sensitive information on the target system.

The weakness exists due to an error when GameStream is enabled,. A local attacker can gain access to important data.

Mitigation

Update to version 3.14.1.

Vulnerable software versions

GeForce Experience: 3.0 - 3.14.0

CPE2.3

External links

http://nvidia.custhelp.com/app/answers/detail/a_id/4685

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.