CVE-2013-0111

Published: Apr 8, 2013Modified: Apr 29, 2026

6.8

Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 3.1 / Impact: 10.0

Source: NVD

Description

daemonu.exe (aka the NVIDIA Update Service Daemon), as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program.

Affected (2)

Products: Nvidia: Driver

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Nvidia Driver	Up to 307.00
Nvidia Driver	Version 310.00

References (4)

http://www.kb.cert.org/vuls/id/957036

Source: cret@cert.org

US Government Resource

http://www.nvidia.com/object/product-security.html

Source: cret@cert.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/957036

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.nvidia.com/object/product-security.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.