This script is Copyright (C) 2016 Tenable Network Security, Inc.
The remote Windows host is affected by multiple vulnerabilities.
The version of the NVIDIA graphics driver installed on the remote
Windows host is 340.x prior to 341.95 or 352.x prior to 354.74. It
is, therefore, affected by multiple vulnerabilities :
- A privilege escalation vulnerability exists due to a
kernel driver escape. A local attacker can exploit this
to gain unauthorized access to restricted functionality,
potentially allowing the execution of arbitrary code.
- An information disclosure vulnerability exists due to an
out-of-bounds read error. A local attacker can exploit
this to read arbitrary information from memory.
- An unspecified untrusted pointer flaw exists that allows
a local attacker to cause a denial of service condition
or the execution of arbitrary code. (CVE-2016-2558)
See also :
Upgrade to video driver version 341.95 / 354.74 or later.
Risk factor :
High / CVSS Base Score : 7.2
CVSS Temporal Score : 5.3
Public Exploit Available : false