CVE-2006-5379
CVE-2006-5379
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
EPSS 27,4% · Code d’exploitation public · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
nvidia-graphics-drivers Debian:12
- Versions du logiciel
- 1.0.6629+1-2
- 1.0.7167-1
- 1.0.7174-1
- 1.0.7174-2
- 1.0.7174-3
- 1.0.7174-4
- 1.0.7664-1
- 1.0.7664-2
- 1.0.7667-1
- 1.0.7667-3
- 1.0.7676-1
- 1.0.7676-2
- 1.0.8174-1
- 1.0.8178-0bpo1
- 1.0.8178-1
- 1.0.8178-2
- 1.0.8178-3
- 1.0.8756-1
- 1.0.8756-2
- 1.0.8756-3
- 1.0.8756-4
- 1.0.8762-1
- 1.0.8762-2
- 1.0.8774-1
- 1.0.8774-2
- 1.0.8774-3
- 1.0.8774-4
- 1.0.8774-5
- 1.0.8774-6
- 1.0.8774-7
- Plages de versions concernées
- ECOSYSTEM: < 1.0.8776-1
Mettez à jour vers 1.0.8776-1
nvidia-graphics-drivers Debian:13
- Versions du logiciel
- 1.0.6629+1-2
- 1.0.7167-1
- 1.0.7174-1
- 1.0.7174-2
- 1.0.7174-3
- 1.0.7174-4
- 1.0.7664-1
- 1.0.7664-2
- 1.0.7667-1
- 1.0.7667-3
- 1.0.7676-1
- 1.0.7676-2
- 1.0.8174-1
- 1.0.8178-0bpo1
- 1.0.8178-1
- 1.0.8178-2
- 1.0.8178-3
- 1.0.8756-1
- 1.0.8756-2
- 1.0.8756-3
- 1.0.8756-4
- 1.0.8762-1
- 1.0.8762-2
- 1.0.8774-1
- 1.0.8774-2
- 1.0.8774-3
- 1.0.8774-4
- 1.0.8774-5
- 1.0.8774-6
- 1.0.8774-7
- Plages de versions concernées
- ECOSYSTEM: < 1.0.8776-1
Mettez à jour vers 1.0.8776-1
nvidia-graphics-drivers Debian:14
- Versions du logiciel
- 1.0.6629+1-2
- 1.0.7167-1
- 1.0.7174-1
- 1.0.7174-2
- 1.0.7174-3
- 1.0.7174-4
- 1.0.7664-1
- 1.0.7664-2
- 1.0.7667-1
- 1.0.7667-3
- 1.0.7676-1
- 1.0.7676-2
- 1.0.8174-1
- 1.0.8178-0bpo1
- 1.0.8178-1
- 1.0.8178-2
- 1.0.8178-3
- 1.0.8756-1
- 1.0.8756-2
- 1.0.8756-3
- 1.0.8756-4
- 1.0.8762-1
- 1.0.8762-2
- 1.0.8774-1
- 1.0.8774-2
- 1.0.8774-3
- 1.0.8774-4
- 1.0.8774-5
- 1.0.8774-6
- 1.0.8774-7
- Plages de versions concernées
- ECOSYSTEM: < 1.0.8776-1
Mettez à jour vers 1.0.8776-1
Sources originales
- http://www.vupen.com/english/advisories/2006/4053
- http://secunia.com/advisories/22730
- http://download2.rapid7.com/r7-0025/nv_exploit.c
- http://security.gentoo.org/glsa/glsa-200611-03.xml
- http://www.securityfocus.com/bid/20559
- http://securityreason.com/securityalert/1742
- http://www.ubuntu.com/usn/usn-377-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1
- http://www.rapid7.com/advisories/R7-0025.jsp
- http://secunia.com/advisories/22419
- http://securitytracker.com/id?1017072
- http://www.kb.cert.org/vuls/id/147252
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29622
- http://www.vupen.com/english/advisories/2006/4328
- http://secunia.com/advisories/22676
- http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971
- http://www.securityfocus.com/archive/1/451329/100/0/threaded
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:007
- http://secunia.com/advisories/23678
- http://download2.rapid7.com/r7-0025/
- http://www.securityfocus.com/archive/1/448860/100/0/threaded
- http://secunia.com/advisories/22764
- https://nvd.nist.gov/vuln/detail/CVE-2006-5379