Vulnerability detected in NVIDIA display driver service
Click here to post a comment for Vulnerability detected in NVIDIA display driver service on our message forum
Veeshush
Surprised no one is really saying much about this. A few replies over at the nvidia forum: https://forums.geforce.com/default/topic/526419/geforce-drivers/security-exploit-found-nvidia-drivers/
Threat Post: http://threatpost.com/en_us/blogs/nvidia-display-driver-service-attack-escalates-privileges-windows-machines-122712
I want to say from the little bit I've read the average user wouldn't have much to worry about as long as they have a firewall up.
lucidus
From what I understand only Enterprises are vulnerable provided the firewall rules are relaxed. Meh.
Noisiv
How about Pro with UAC, software and hardware firewall, and Secondary Logon Service disabled 🙂
What pisses me off is that multi-billion $ company does not have a single person dedicated for informing the public in a fast and accurate manner.
But if I was guessing, I'd say that NVIDIA is publicly ignoring this due to a manner that the exploit has been disclosed.
Winter-Smith said he wanted to share the exploit in a timely fashion, rather than report it.
“I am definitely not averse to responsible disclosure and typically do follow a responsible disclosure process, however the risk from this particular flaw being exploited was (is) sufficiently low that I didn't think it would warrant the wait,” he said.