CVE-2017-0317

All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path…

published February 15, 2017

CVSS
—
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.0th percentile
Published
2017-02-15T23:00Z
EPSS history
Timeline
  • 15 FEB 23:00Z
    All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path…
    cvelistv5