Published: 18/10/2006 Updated: 17/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote malicious users to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nvidia binary graphics driver v8762
nvidia binary graphics driver v8774

Derek Abdine discovered that the NVIDIA Xorg driver did not correctly verify the size of buffers used to render text glyphs When displaying very long strings of text, the Xorg server would crash If a user were tricked into viewing a specially crafted series of glyphs, this flaw could be exploited to run arbitrary code with root privileges ...

/* * Copyright (c) 2005 Matthieu Herrb * Copyright (c) 2006 Derek Abdine, Marc Bevand * * Permission to use, copy, modify, and distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies * * THE SOFTWARE IS PROVIDED "AS IS" AND ...

NVD-CWE-Other http://download2.rapid7.com/r7-0025/nv_exploit.c http://www.rapid7.com/advisories/R7-0025.jsp http://www.kb.cert.org/vuls/id/147252 http://securitytracker.com/id?1017072 http://secunia.com/advisories/22419 http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971 http://www.securityfocus.com/bid/20559 http://download2.rapid7.com/r7-0025/http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1 http://www.ubuntu.com/usn/usn-377-1 http://secunia.com/advisories/22676 http://secunia.com/advisories/22730 http://security.gentoo.org/glsa/glsa-200611-03.xml http://secunia.com/advisories/22764 http://www.mandriva.com/security/advisories?name=MDKSA-2007:007 http://secunia.com/advisories/23678 http://securityreason.com/securityalert/1742 http://www.vupen.com/english/advisories/2006/4053 http://www.vupen.com/english/advisories/2006/4328 https://exchange.xforce.ibmcloud.com/vulnerabilities/29622 http://www.securityfocus.com/archive/1/451329/100/0/threaded http://www.securityfocus.com/archive/1/448860/100/0/threaded https://usn.ubuntu.com/377-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/2581/https://www.kb.cert.org/vuls/id/147252

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-5379

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect