NVIDIA Stereoscopic 3D Driver Local Privilege Escalation Vulnerability

Release date: 2011-12-21
Updated on: 2011-12-22

Affected Systems:
NVIDIA Stereoscopic 3D Driver 7.17.12 7565
NVIDIA Stereoscopic 3D Driver 7.17.12 7536
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51148
Cve id: CVE-2011-4784

NVIDIA Stereoscopic 3D Driver is a three-dimensional 3D graphics card Driver.

NVIDIA Stereoscopic 3D Driver has a local security vulnerability when verifying and filtering certain commands to a specified pipeline. You can export local system permissions to execute arbitrary commands.

<* Source: Jeong Wook Oh

Link: http://technet.microsoft.com/en-us/security/msvr/msvr11-016
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

NVIDIA
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.nvidia.com/