Nvidia Graphics Driver 8774 - Local Buffer Overflow

admin 2023-12-14 00:45:52 Ali_nvd 来源:ZONE.CI 全球网 0 阅读模式
中危 Nvidia Graphics Driver 8774 - Local Buffer Overflow

CVE编号

CVE-2006-5379

利用情况

POC 已公开

补丁情况

官方补丁

披露时间

2006-10-18
漏洞描述
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
解决建议
建议您更新当前系统或软件至最新版,完成漏洞的修复。
参考链接
http://download2.rapid7.com/r7-0025/
http://download2.rapid7.com/r7-0025/nv_exploit.c
http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971
http://secunia.com/advisories/22419
http://secunia.com/advisories/22676
http://secunia.com/advisories/22730
http://secunia.com/advisories/22764
http://secunia.com/advisories/23678
http://security.gentoo.org/glsa/glsa-200611-03.xml
http://securityreason.com/securityalert/1742
http://securitytracker.com/id?1017072
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1
http://www.kb.cert.org/vuls/id/147252
http://www.mandriva.com/security/advisories?name=MDKSA-2007:007
http://www.rapid7.com/advisories/R7-0025.jsp
http://www.securityfocus.com/archive/1/448860/100/0/threaded
http://www.securityfocus.com/archive/1/451329/100/0/threaded
http://www.securityfocus.com/bid/20559
http://www.ubuntu.com/usn/usn-377-1
http://www.vupen.com/english/advisories/2006/4053
http://www.vupen.com/english/advisories/2006/4328
https://exchange.xforce.ibmcloud.com/vulnerabilities/29622
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
应用 nvidia binary_graphics_driver v8762 -
运行在以下环境
应用 nvidia binary_graphics_driver v8774 -
运行在以下环境
系统 debian_10 nvidia-graphics-drivers * Up to (excluding) 1.0.8776-1
运行在以下环境
系统 debian_11 nvidia-graphics-drivers * Up to (excluding) 1.0.8776-1
运行在以下环境
系统 debian_12 nvidia-graphics-drivers * Up to (excluding) 1.0.8776-1
运行在以下环境
系统 debian_sid nvidia-graphics-drivers * Up to (excluding) 1.0.8776-1
阿里云评分 6.2
  • 攻击路径 本地
  • 攻击复杂度 复杂
  • 权限要求 普通权限
  • 影响范围 越权影响
  • EXP成熟度 POC 已公开
  • 补丁情况 官方补丁
  • 数据保密性 无影响
  • 数据完整性 无影响
  • 服务器危害 无影响
  • 全网数量 N/A
CWE-ID 漏洞类型
NVD-CWE-Other
- avd.aliyun.com
weinxin
版权声明
本站原创文章转载请注明文章出处及链接,谢谢合作!
N/A Ali_nvd

N/A

N/ACVE编号 CVE-2024-9120利用情况 暂无补丁情况 N/A披露时间 2024-09-23漏洞描述Use after free in Dawn
评论:0   参与:  0