National Cyber-Alert System

Vulnerability Summary for CVE-2006-5379

Overview

The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#147252

Name: VU#147252

Hyperlink:http://www.kb.cert.org/vuls/id/147252

External Source: BUGTRAQ

Name: 20061016 Rapid7 Advisory R7-0025: Buffer Overflow in NVIDIA Binary Graphics Driver For Linux

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/448860/100/0/threaded

External Source: MISC

Name: http://www.rapid7.com/advisories/R7-0025.jsp

Type: Advisory

Hyperlink:http://www.rapid7.com/advisories/R7-0025.jsp

External Source: VUPEN

Name: ADV-2006-4053

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/4053

External Source: SECTRACK

Name: 1017072

Hyperlink:http://securitytracker.com/id?1017072

External Source: SECUNIA

Name: 22419

Type: Advisory

Hyperlink:http://secunia.com/advisories/22419

External Source: MISC

Name: http://download2.rapid7.com/r7-0025/nv_exploit.c

Hyperlink:http://download2.rapid7.com/r7-0025/nv_exploit.c

External Source: XF

Name: nvidia-linux-driver-bo(29622)

Hyperlink:http://xforce.iss.net/xforce/xfdb/29622

External Source: UBUNTU

Name: USN-377-1

Hyperlink:http://www.ubuntu.com/usn/usn-377-1

External Source: BID

Name: 20559

Hyperlink:http://www.securityfocus.com/bid/20559

External Source: BUGTRAQ

Name: 20061113 Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/451329/100/0/threaded

External Source: MANDRIVA

Name: MDKSA-2007:007

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:007

External Source: VUPEN

Name: ADV-2006-4328

Hyperlink:http://www.frsirt.com/english/advisories/2006/4328

External Source: SUNALERT

Name: 102693

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1

External Source: SREASON

Name: 1742

Hyperlink:http://securityreason.com/securityalert/1742

External Source: GENTOO

Name: GLSA-200611-03

Hyperlink:http://security.gentoo.org/glsa/glsa-200611-03.xml

External Source: SECUNIA

Name: 23678

Hyperlink:http://secunia.com/advisories/23678

External Source: SECUNIA

Name: 22764

Hyperlink:http://secunia.com/advisories/22764

External Source: SECUNIA

Name: 22730

Hyperlink:http://secunia.com/advisories/22730

External Source: SECUNIA

Name: 22676

Hyperlink:http://secunia.com/advisories/22676

External Source: CONFIRM

Name: http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971

Hyperlink:http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971

External Source: MISC

Name: http://download2.rapid7.com/r7-0025/

Hyperlink:http://download2.rapid7.com/r7-0025/