Executive Summary
Summary | |
---|---|
Title | NVIDIA UNIX GPU driver ARGB cursor buffer overflow in "NoScanout" mode |
Informations | |||
---|---|---|---|
Name | VU#771620 | First vendor Publication | 2013-04-05 |
Vendor | VU-CERT | Last vendor Modification | 2013-04-05 |
Severity (Vendor) | N/A | Revision | M |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:H/Au:S/C:C/I:C/A:C) | |||
---|---|---|---|
Cvss Base Score | 7.1 | Attack Range | Network |
Cvss Impact Score | 10 | Attack Complexity | High |
Cvss Expoit Score | 3.9 | Authentication | Requires single instance |
Calculate full CVSS 2.0 Vectors scores |
Detail
Vulnerability Note VU#771620NVIDIA UNIX GPU driver ARGB cursor buffer overflow in "NoScanout" modeOverviewNVIDIA UNIX video drivers contain a buffer overflow vulnerability when run in NoScanout mode. Description
Impact
Solution
Vendor Information (Learn More)
CVSS Metrics (Learn More)
References
CreditThanks to the NVIDIA security team for reporting this vulnerability. This document was written by Jared Allar. Other Information
FeedbackIf you have feedback, comments, or additional information about this vulnerability, please send us email. |
Original Source
Url : http://www.kb.cert.org/vuls/id/771620 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
100 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
OVAL Definitions
Definition Id: oval:org.mitre.oval:def:18371 | |||
Oval ID: | oval:org.mitre.oval:def:18371 | ||
Title: | USN-1799-1 -- nvidia-graphics-drivers, nvidia-graphics-drivers-updates, nvidia-settings, nvidia-settings-updates vulnerability | ||
Description: | NVIDIA graphics drivers could be made to run programs as an administrator 2E Software Description: - nvidia-graphics-drivers: NVIDIA binary Xorg driver - nvidia-graphics-drivers-updates: NVIDIA binary Xorg driver - nvidia-settings: Tool for configuring the NVIDIA graphics driver - nvidia-settings-updates: Tool for configuring the NVIDIA graphics drive r Details: It was discovered that the NVIDIA graphics drivers incorrectly handled large ARGB cursors. | ||
Family: | unix | Class: | patch |
Reference(s): | USN-1799-1 CVE-2013-0131 | Version: | 7 |
Platform(s): | Ubuntu 12.10 Ubuntu 12.04 | Product(s): | nvidia-graphics-drivers nvidia-graphics-drivers-updates nvidia-settings nvidia-settings-updates |
Definition Synopsis: | |||
|
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2013-04-12 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_1431f2d6a06e11e2b9e0001636d274f3.nasl - Type : ACT_GATHER_INFO |
2013-04-11 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1799-1.nasl - Type : ACT_GATHER_INFO |
2013-04-09 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201304-01.nasl - Type : ACT_GATHER_INFO |
Alert History
Date | Informations |
---|---|
2013-05-16 17:18:16 |
|
2013-05-11 05:18:25 |
|
2013-04-09 21:20:19 |
|
2013-04-08 21:20:22 |
|
2013-04-06 00:17:21 |
|