CVE-2016-3161

High

Published: 08/11/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-3161 concerns a vulnerability in NVIDIA Quadro, NVS, and GeForce products related to unquoted service paths in Windows. Exploiting this vulnerability may allow malicious code to execute at the system or user privilege level.

Risk Assessment

Organizations may be exposed to malware that can gain access to the system and perform unauthorized actions. This could lead to data loss or security breaches.

Recommendation

It is recommended to update NVIDIA software to the latest version and verify service configurations to ensure that service paths are correctly quoted.

Other vulnerabilities in NVIDIA Quadro, NVS, and GeForce products

CVE-2016-4959High
For NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service vulnerability. A successful exploit will result in a kernel null pointer dereference, causing a blue screen crash.

Original NVD description (English source)

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system at the system/user privilege level. The CVE-2016-3161 ID is for the GameStream unquoted service path.