Cyber Risks · Cisco Talos

Vulnerability Spotlight: Local Denial of Service Bug in NVIDIA Windows Kernel Mode Drivers Fixed

Summary: Cisco Talos, working with NVIDIA, disclosed a local denial of service bug in the NVIDIA Windows Kernel Mode Driver tracked as TALOS-2016-0217 (CVE-2016-8823), caused by deficient handling of messages in the driver's communication functionality. An application sending a specifically crafted message to the driver could trigger a bug check and blue-screen crash, affecting GeForce Windows Kernel Mode Driver versions 372.70 and 372.90, and NVIDIA released update 376.33 to address it.

What you should know: A single crafted message to a kernel driver is enough to blue-screen a Windows host, and Talos notes its Snort rules 40934-40935 may change and more may follow, so detection coverage for this flaw is not fixed.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2016-8823
Related