NVIDIA has addressed a security vulnerability in the Windows version GeForce Experience, recommends that users install the latest version as soon as possible.
This vulnerability has been assigned to CVE-2019-5702, the vulnerability affects all versions for Windows software, supporting NVIDIA before 3.20.2. To fix this vulnerability, the user must install the NVIDIA Geforce Experience 3.20.2.
NVIDIA said that the vulnerability could allow an attacker to compromise a system file, so that the service is rejected or privilege escalation. Through sophisticated attacks, malicious actors can get administrator privileges, ultimately deploy additional payload on the infected device.
NVIDIA said in a briefing to explain , said: "When enabled GameStream, NVIDIA GeForce Experience contains a vulnerability in the vulnerability, the attacker has local access to the system may corrupt the system files, which may lead to a denial of service or privilege escalation."
Early versions of software support branch of the product will also be affected. If you are using an earlier version of the branch, the branch upgrade to the latest version. "
All affected versions of Windows
The vulnerability also affects all versions of Windows install NVIDIA software, including Windows 7 here and Windows 10. All versions of Windows 10 are open, including the update in November 2019, as long as the NVIDIA GeForce unpatched version running on the device.
It is noteworthy that, as NVIDIA said in its security bulletin, exploitation requires "local system access" and therefore can not remotely exploit this vulnerability.
NVIDIA GeForce Experience 3.20.2.34 In addition to security patches, also introduces other improvements, such as new optimized games such as "Call of Duty: Modern Warfare," "A Fistful of Dollars," "Need for Speed 2" and "Need for Speed: Most wanted". This release also includes other bug fixes, bug fixes, including some of the game can not start.