NVD Vulnerability Detail

CVE-2018-19320

Summary	The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
Publication Date	Dec. 22, 2018, 8:29 a.m.
Registration Date	March 1, 2021, 7:12 p.m.
Last Update	Nov. 21, 2024, 12:57 p.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:gigabyte:oc_guru_ii:2.08:::::::*
cpe:2.3:a:gigabyte:aorus_graphics_engine::::::::				1.57
cpe:2.3:a:gigabyte:app_center::::::::				19.0422.1
cpe:2.3:a:gigabyte:xtreme_gaming_engine::::::::				1.26

Related information, measures and tools

No	URL	タグ
1	http://seclists.org/fulldisclosure/2018/Dec/39	Exploit Mailing List Third Party Advisory
2	http://seclists.org/fulldisclosure/2018/Dec/39	Exploit Mailing List Third Party Advisory
3	http://www.securityfocus.com/bid/106252	Broken Link Third Party Advisory VDB Entry
4	http://www.securityfocus.com/bid/106252	Broken Link Third Party Advisory VDB Entry
5	https://www.gigabyte.com/Support/Security/1801	Vendor Advisory
6	https://www.gigabyte.com/Support/Security/1801	Vendor Advisory
7	https://www.gigabyte.com/tw/Support/Utility/Graphics-Card	Product
8	https://www.gigabyte.com/tw/Support/Utility/Graphics-Card	Product
9	https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities	Exploit Third Party Advisory
10	https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities	Exploit Third Party Advisory

Common Vulnerabilities List

JVN Vulnerability Information

複数の GIGABYTE 製品における脆弱性

Title	複数の GIGABYTE 製品における脆弱性
Summary	複数の GIGABYTE 製品には、不特定の脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Dec. 18, 2018, midnight
Registration Date	Feb. 20, 2019, 6:02 p.m.
Last Update	July 1, 2024, 2:52 p.m.

Affected System

GIGABYTE Technology Co., Ltd.

AORUS GRAPHICS ENGINE 1.33 およびそれ以前

APP Center 1.05.21 およびそれ以前

OC GURU II 2.08

XTREME GAMING ENGINE 1.25 およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
CISA Known Exploited Vulnerabilities Catalog
1	CVE-2018-19320	https://cisa.gov/known-exploited-vulnerabilities-catalog
Common Vulnerabilities and Exposures (CVE)
2	CVE-2018-19320	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19320
National Vulnerability Database (NVD)
3	CVE-2018-19320	https://nvd.nist.gov/vuln/detail/CVE-2018-19320

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

No	Name	URL
gigabyte
1	Top Page	https://www.gigabyte.com/

その他

No	Name	URL
関連文書
1	CORE-2018-0007	https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities

Change Log

No	Changed Details	Date of change
1	[2019年02月20日] 掲載	Feb. 20, 2019, 6:02 p.m.
2	[2024年07月01日] タイトル：内容を更新概要：内容を更新 CWE による脆弱性タイプ一覧：内容を更新参考情報：CISA Known Exploited Vulnerabilities Catalog (CVE-2018-19320) を追加	July 1, 2024, 11:32 a.m.