CVEvulnerability
CVE-2006-5379
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-10-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
Affected configurations
• nvidia binary graphics driver v8762
• nvidia binary graphics driver v8774
References
- http://download2.rapid7.com/r7-0025/ download2.rapid7.com
- http://download2.rapid7.com/r7-0025/nv_exploit.c Exploit
- http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971 nvidia.custhelp.com
- http://secunia.com/advisories/22419 Vendor Advisory
- http://secunia.com/advisories/22676 secunia.com
- http://secunia.com/advisories/22730 secunia.com
- http://secunia.com/advisories/22764 secunia.com
- http://secunia.com/advisories/23678 secunia.com
- http://security.gentoo.org/glsa/glsa-200611-03.xml security.gentoo.org
- http://securityreason.com/securityalert/1742 securityreason.com
- http://securitytracker.com/id?1017072 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1 sunsolve.sun.com
- http://www.kb.cert.org/vuls/id/147252 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:007 www.mandriva.com
- http://www.rapid7.com/advisories/R7-0025.jsp Vendor Advisory
- http://www.securityfocus.com/archive/1/448860/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/451329/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20559 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-377-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/4053 www.vupen.com
- http://www.vupen.com/english/advisories/2006/4328 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29622 exchange.xforce.ibmcloud.com
- http://download2.rapid7.com/r7-0025/ download2.rapid7.com
- http://download2.rapid7.com/r7-0025/nv_exploit.c Exploit
- http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971 nvidia.custhelp.com
- http://secunia.com/advisories/22419 Vendor Advisory
- http://secunia.com/advisories/22676 secunia.com
- http://secunia.com/advisories/22730 secunia.com
- http://secunia.com/advisories/22764 secunia.com
- http://secunia.com/advisories/23678 secunia.com
- http://security.gentoo.org/glsa/glsa-200611-03.xml security.gentoo.org
- http://securityreason.com/securityalert/1742 securityreason.com
- http://securitytracker.com/id?1017072 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1 sunsolve.sun.com
- http://www.kb.cert.org/vuls/id/147252 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:007 www.mandriva.com
- http://www.rapid7.com/advisories/R7-0025.jsp Vendor Advisory
- http://www.securityfocus.com/archive/1/448860/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/451329/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20559 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-377-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/4053 www.vupen.com
- http://www.vupen.com/english/advisories/2006/4328 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29622 exchange.xforce.ibmcloud.com