CVE-2013-0110

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-08 · updated 2026-06-16

Description

nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program.

Affected products

NVIDIA Driver: through 307.00; 310.00

References

http://www.kb.cert.org/vuls/id/957036
http://www.nvidia.com/object/product-security.html
http://www.kb.cert.org/vuls/id/957036
http://www.nvidia.com/object/product-security.html

Get alerted when CVE-2013-0110 or the next vulnerability affects your stack