CVE-2006-5379
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 27%
from disclosure to weapon0 days
Published on NVDOct 18
1st PoCOct 16
exploitation probability
27%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2581⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://download2.rapid7.com/r7-0025/http://download2.rapid7.com/r7-0025/nv_exploit.chttp://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971http://secunia.com/advisories/22419http://secunia.com/advisories/22676http://secunia.com/advisories/22730http://secunia.com/advisories/22764http://secunia.com/advisories/23678http://security.gentoo.org/glsa/glsa-200611-03.xmlhttp://securityreason.com/securityalert/1742http://securitytracker.com/id?1017072https://exchange.xforce.ibmcloud.com/vulnerabilities/29622