Geeks for your information
NVIDIA fixes code execution bug in GeForce Experience software - Printable Version

+- Geeks for your information (https://www.geeks.fyi)
+-- Forum: News (https://www.geeks.fyi/forumdisplay.php?fid=105)
+--- Forum: Privacy & Security News (https://www.geeks.fyi/forumdisplay.php?fid=107)
+--- Thread: NVIDIA fixes code execution bug in GeForce Experience software (/showthread.php?tid=12108)



NVIDIA fixes code execution bug in GeForce Experience software - silversurfer - 08 July 20

Quote:NVIDIA has addressed a vulnerability in the Windows NVIDIA GeForce Experience (GFE) software that could allow local attackers to execute arbitrary code, trigger a denial of service (DoS) state, or access privileged information on unpatched systems.
 
Even though the security flaw tracked as CVE‑2020‑5964 requires attackers to have local user access to the device and cannot be exploited remotely, it can still be abused with the help of malicious tools delivered to systems running vulnerable NVIDIA GFE versions.
 
NVIDIA GeForce Experience is the companion software for GeForce GTX, RTX, TITAN X, and other NVIDIA GeForce graphics cards, and it can be installed on computers running Windows 7 or later.
It "keeps your drivers up to date, automatically optimizes your game settings, and gives you the easiest way to share your greatest gaming moments with friends" according to NVIDIA
Quote:To apply the security update, NVIDIA GeForce Experience users can download the latest software version from the GeForce Experience Downloads page or launch the GFE client on their Windows computers to have it applied using the built-in automatic update mechanism.

Read more: https://www.bleepingcomputer.com/news/security/nvidia-fixes-code-execution-bug-in-geforce-experience-software/