Allele Security Alert
ASA-2019-00312
Identifier(s)
ASA-2019-00312, CVE-2019-5678
Title
Vulnerability in the Web Helper component
Vendor(s)
NVIDIA
Product(s)
NVIDIA GeForce Experience
Affected version(s)
NVIDIA GeForce Experience versions prior to 3.19 running on Windows
Fixed version(s)
NVIDIA GeForce Experience 3.19
Proof of concept
Unknown
Description
NVIDIA GeForce Experience contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution, denial of service or information disclosure.
Technical details
Unknown
Credits
David Yesland (Rhino Security Labs)
Reference(s)
Security Bulletin: NVIDIA GeForce Experience – May 2019
https://nvidia.custhelp.com/app/answers/detail/a_id/4806
CVE‑2019‑5678
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE‑2019‑5678
CVE‑2019‑5678
https://nvd.nist.gov/vuln/detail/CVE‑2019‑5678
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: June 5, 2019