[security-alerts] FW: [SA22419] NVIDIA Binary Graphics Driver for Linux Buffer Overflow Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> NVIDIA Binary Graphics Driver for Linux Buffer Overflow Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA22419
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/22419/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> Privilege escalation, DoS, System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> NVIDIA Graphics Drivers for Linux 1.x
> http://secunia.com/product/12331/
> 
> DESCRIPTION:
> Rapid7 has reported a vulnerability in NVIDIA Binary Graphics Driver
> for Linux, which can be exploited by malicious, local users to gain
> escalated privileges and potentially by malicious people to
> compromise a user's system.
> 
> A boundary error when performing accelerated rendering of glyphs can
> be exploited to cause a buffer overflow via a specially crafted short
> sequence of user-supplied glyphs.
> 
> Successful exploitation allows execution of arbitrary code with
> "root" privileges.
> 
> The vulnerability is reported in versions 8774 and 8762. Other
> versions may also be affected.
> 
> SOLUTION:
> Disable accelerated rendering ("RenderAccel" option).
> 
> Use another graphics driver.
> 
> The vulnerability has reportedly been fixed in the 1.0-9625 beta
> driver.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Derek Abdine, Rapid7.
> 
> ORIGINAL ADVISORY:
> Rapid7:
> http://www.rapid7.com/advisories/R7-0025.jsp
> 
> ----------------------------------------------------------------------
> 
> About:
> This Advisory was delivered by Secunia as a free service to help
> everybody keeping their systems up to date against the latest
> vulnerabilities.
> 
> Subscribe:
> http://secunia.com/secunia_security_advisories/
> 
> Definitions: (Criticality, Where etc.)
> http://secunia.com/about_secunia_advisories/
> 
> 
> Please Note:
> Secunia recommends that you verify all advisories you receive by
> clicking the link.
> Secunia NEVER sends attached files with advisories.
> Secunia does not advise people to install third party patches, only
> use those supplied by the vendor.
> 
> ----------------------------------------------------------------------
> 
> Unsubscribe: Secunia Security Advisories
> http://secunia.com/sec_adv_unsubscribe/?email=vladimir.kazenno
> v%40billing.ru
> 
> ----------------------------------------------------------------------
>