VulnerabilityModified

CVE-2013-5987

Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows local users to bypass intended access restrictions for the GPU and gain privileges via unknown vectors.

HIGH 7.2EPSS 0.41%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows local users to bypass intended access restrictions for the GPU and gain privileges via unknown vectors.

CVSS 2.0: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 0.41% probability · 35th percentile
CISA KEV: Not listed
Affected: nvidia/gpu driver · apple/mac os x
Source: cve@mitre.org

References

http://marc.info/?l=bugtraq&m=139965942001604&w=2Third Party Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/3377Vendor Advisory
http://support.apple.com/kb/HT6150Third Party Advisory
http://marc.info/?l=bugtraq&m=139965942001604&w=2Third Party Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/3377Vendor Advisory
http://support.apple.com/kb/HT6150Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.