Vulnerability Spotlight: Denial-of-service vulnerability in NVIDIA driver

Piotr Bania of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.
Executive summaryThe NVWGF2UMX_CFG.DLL driver contains a denial-of-service vulnerability that an attacker could use to disrupt processes over a virtual machine. An adversary could exploit this bug by
providing a specially crafted pixel shader over VMware guests and VMware hosts, leading to VMware to process crash on the host machine.

In accordance with our coordinated disclosure policy, Cisco Talos worked with…

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Article Link: