CVE-2017-0317

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package extraction path thus allowing a non-privileged user to tamper with the extracted files, potentially leading to escalation of privileges via code execution.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

VendorProductVersions
Nvidia CorporationWindows GPU Display DriverAll

References

Timeline

Published
Feb 15, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-03185.5All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an inpCVE-2017-03195.5All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of valuesCVE-2017-03205.5All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of valuesCVE-2017-03218.8All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused bCVE-2017-03227.8All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a value passCVE-2017-03237.8All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference CVE-2017-03247.8All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape CVE-2017-03257.0An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code wiCVE-2017-03265.5An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Display Controller driCVE-2017-03277.0An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code witCVE-2017-03284.7An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of itsCVE-2017-03297.0An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application
CVE-2017-0317: High severity, CVSS 7.5 | Vulnix