Files
CVEs-PoC/2020/CVE-2020-5992.md
T
2024-06-18 02:51:15 +02:00

19 lines
901 B
Markdown

### [CVE-2020-5992](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5992)
![](https://img.shields.io/static/v1?label=Product&message=NVIDIA%20GeForce%20NOW%20Application&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=code%20execution%2C%20escalation%20of%20privileges&color=brighgreen)
### Description
NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to binary planting attacks by a local user, which may lead to code execution or escalation of privileges.
### POC
#### Reference
- https://nvidia.custhelp.com/app/answers/detail/a_id/5096
#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/chnzzh/OpenSSL-CVE-lib