ID CVE-2006-5379
Summary The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
References
Vulnerable Configurations
  • cpe:2.3:a:nvidia:binary_graphics_driver:v8762:*:linux:*:*:*:*:*
    cpe:2.3:a:nvidia:binary_graphics_driver:v8762:*:linux:*:*:*:*:*
  • cpe:2.3:a:nvidia:binary_graphics_driver:v8774:*:linux:*:*:*:*:*
    cpe:2.3:a:nvidia:binary_graphics_driver:v8774:*:linux:*:*:*:*:*
CVSS
Base: 7.5 (as of 17-10-2018 - 21:42)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 20559
bugtraq
  • 20061016 Rapid7 Advisory R7-0025: Buffer Overflow in NVIDIA Binary Graphics Driver For Linux
  • 20061113 Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
cert-vn VU#147252
confirm http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971
gentoo GLSA-200611-03
mandriva MDKSA-2007:007
misc
sectrack 1017072
secunia
  • 22419
  • 22676
  • 22730
  • 22764
  • 23678
sreason 1742
sunalert 102693
ubuntu USN-377-1
vupen
  • ADV-2006-4053
  • ADV-2006-4328
xf nvidia-linux-driver-bo(29622)
Last major update 17-10-2018 - 21:42
Published 18-10-2006 - 04:06
Last modified 17-10-2018 - 21:42
Back to Top