CVE-2006-5379
CVE-2006-5379
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
EPSS 27.4% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
nvidia-graphics-drivers Debian:12
- Versions
- 1.0.6629+1-2
- 1.0.7167-1
- 1.0.7174-1
- 1.0.7174-2
- 1.0.7174-3
- 1.0.7174-4
- 1.0.7664-1
- 1.0.7664-2
- 1.0.7667-1
- 1.0.7667-3
- 1.0.7676-1
- 1.0.7676-2
- 1.0.8174-1
- 1.0.8178-0bpo1
- 1.0.8178-1
- 1.0.8178-2
- 1.0.8178-3
- 1.0.8756-1
- 1.0.8756-2
- 1.0.8756-3
- 1.0.8756-4
- 1.0.8762-1
- 1.0.8762-2
- 1.0.8774-1
- 1.0.8774-2
- 1.0.8774-3
- 1.0.8774-4
- 1.0.8774-5
- 1.0.8774-6
- 1.0.8774-7
- Affected ranges
- ECOSYSTEM: < 1.0.8776-1
Update to 1.0.8776-1
nvidia-graphics-drivers Debian:13
- Versions
- 1.0.6629+1-2
- 1.0.7167-1
- 1.0.7174-1
- 1.0.7174-2
- 1.0.7174-3
- 1.0.7174-4
- 1.0.7664-1
- 1.0.7664-2
- 1.0.7667-1
- 1.0.7667-3
- 1.0.7676-1
- 1.0.7676-2
- 1.0.8174-1
- 1.0.8178-0bpo1
- 1.0.8178-1
- 1.0.8178-2
- 1.0.8178-3
- 1.0.8756-1
- 1.0.8756-2
- 1.0.8756-3
- 1.0.8756-4
- 1.0.8762-1
- 1.0.8762-2
- 1.0.8774-1
- 1.0.8774-2
- 1.0.8774-3
- 1.0.8774-4
- 1.0.8774-5
- 1.0.8774-6
- 1.0.8774-7
- Affected ranges
- ECOSYSTEM: < 1.0.8776-1
Update to 1.0.8776-1
nvidia-graphics-drivers Debian:14
- Versions
- 1.0.6629+1-2
- 1.0.7167-1
- 1.0.7174-1
- 1.0.7174-2
- 1.0.7174-3
- 1.0.7174-4
- 1.0.7664-1
- 1.0.7664-2
- 1.0.7667-1
- 1.0.7667-3
- 1.0.7676-1
- 1.0.7676-2
- 1.0.8174-1
- 1.0.8178-0bpo1
- 1.0.8178-1
- 1.0.8178-2
- 1.0.8178-3
- 1.0.8756-1
- 1.0.8756-2
- 1.0.8756-3
- 1.0.8756-4
- 1.0.8762-1
- 1.0.8762-2
- 1.0.8774-1
- 1.0.8774-2
- 1.0.8774-3
- 1.0.8774-4
- 1.0.8774-5
- 1.0.8774-6
- 1.0.8774-7
- Affected ranges
- ECOSYSTEM: < 1.0.8776-1
Update to 1.0.8776-1
Original sources
- http://www.vupen.com/english/advisories/2006/4053
- http://secunia.com/advisories/22730
- http://download2.rapid7.com/r7-0025/nv_exploit.c
- http://security.gentoo.org/glsa/glsa-200611-03.xml
- http://www.securityfocus.com/bid/20559
- http://securityreason.com/securityalert/1742
- http://www.ubuntu.com/usn/usn-377-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1
- http://www.rapid7.com/advisories/R7-0025.jsp
- http://secunia.com/advisories/22419
- http://securitytracker.com/id?1017072
- http://www.kb.cert.org/vuls/id/147252
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29622
- http://www.vupen.com/english/advisories/2006/4328
- http://secunia.com/advisories/22676
- http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971
- http://www.securityfocus.com/archive/1/451329/100/0/threaded
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:007
- http://secunia.com/advisories/23678
- http://download2.rapid7.com/r7-0025/
- http://www.securityfocus.com/archive/1/448860/100/0/threaded
- http://secunia.com/advisories/22764
- https://nvd.nist.gov/vuln/detail/CVE-2006-5379