Lucene search

MitreCVE-2007-3532

HistoryJul 27, 2007 - 10:30 p.m.

CVE-2007-3532

2007-07-2722:30:00

CWE-264

mitre

web.nvd.nist.gov

nvidia drivers

/dev/nvidia*

permissions

denial of service

gentoo linux

video card

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other distributions, creates /dev/nvidia* device files with insecure permissions, which allows local users to modify video card settings, cause a denial of service (crash or physical video card damage), and obtain sensitive information.

Affected configurations

Nvd

Node

gentoolinux

AND

nvidiavideo_driverRange≤1.0.7185

nvidiavideo_driverRange≤1.0.9639

nvidiavideo_driverRange≤100.14.11

VendorProductVersionCPE
gentoolinux*cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
nvidiavideo_driver*cpe:2.3:a:nvidia:video_driver:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gentoo	linux	*	cpe:2.3:o:gentoo:linux::::::::
nvidia	video_driver	*	cpe:2.3:a:nvidia:video_driver::::::::

References

osvdb.org/40177

secunia.com/advisories/26497

www.gentoo.org/security/en/glsa/glsa-200708-14.xml

www.securityfocus.com/bid/25360

www.securityfocus.com/bid/25363

bugs.gentoo.org/show_bug.cgi?id=183567

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2007-3532