If you are a GeForce owner, you'll no doubt want to give this a read. The vulnerability is serious enough that it could give attackers administrator privileges on Windows PCs.

Peter Winter-Smith, formerly with the NGS Software of the U.K., posted details of the vulnerability and exploit to Pastebin. In it, he explains that the service is vulnerable to a stack buffer overflow that bypasses data execution prevention (DEP) and address space layout randomization (ASLR) running in the Windows operating system since Windows Vista.

"The service listens on a named pipe (\pipe\nsvr) which has a NULL DACL configured, which should mean that any logged on user or remote user in a domain context (Windows firewall/file sharing permitting) should be able to exploit this vulnerability," Winter-Smith wrote on Pastebin. "The buffer overflow occurs as a result of a bad memmove operation."

Winter-Smith told Threatpost the vulnerability is difficult to exploit because it mostly affects domain-based machine, and the machines in question would have to have relaxed firewall rules and need to be able to share files.

"In the local scenario in which an attacker attempts to gain increased privileges on a machine they already have access to, it would be very easy," Winter-Smith said. "It's not incredibly serious (compared to—say--a browser exploit). If it were going to put people at risk I'd not have released exploit code and I'd have informed the vendor and kept quiet until a fix were issued."