NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check for hard links. This behavior may lead to code execution, denial of service or escalation of privileges.
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Link | Tags |
---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/4772 | patch vendor advisory |
http://support.lenovo.com/us/en/solutions/LEN-26250 |