CVE-2017-0869 - NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and poss

CVE-2017-0869

Summary

NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execution as a privileged process. This issue is rated as high. Version: N/A. Android ID: A-37776156. References: N-CVE-2017-0869.

References

http://www.securityfocus.com/bid/102374
http://www.securitytracker.com/id/1040106
https://source.android.com/security/bulletin/2018-01-01

Vulnerable Configurations

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 01-02-2018 - 20:45)
Impact:
Exploitability:

CWE

CWE-416

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	102374
confirm	https://source.android.com/security/bulletin/2018-01-01
sectrack	1040106

Last major update

01-02-2018 - 20:45

Published

12-01-2018 - 15:29

Last modified

01-02-2018 - 20:45