NVIDIA binary graphics driver: Privilege escalation vulnerability

2006-10-1800:00:00

attackerkb.com

EPSS

0.413

Percentile

97.3%

JSON

The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.

Recent assessments:

jcran at November 14, 2019 9:34pm UTC reported:

This vuln is triggerable as a drive-by if someone visits a site using a browser while the impacted nvidia blob driver was used on the system. You could do this by installing a custom set of font glyphs that contain shellcode, and overflowing the video buffer with a long “string” of those glyphs (which would write past the video buffer memory boundary). However, the likelihood of someone using this driver today is extremely low, so, not very useful.

Assessed Attacker Value: 1
Assessed Attacker Value: 1Assessed Attacker Value: 5