CVE-2006-5379

HIGH 7.5CVE-2006-5379 · Published 18/10/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
binary graphics driver nvidia	`= v8762= v8774`	No fix yet

Description

The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.

References

download2.rapid7.com/r7-0025
download2.rapid7.com/r7-0025/nv_exploit.c · Exploit
nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php
secunia.com/advisories/22419 · Vendor Advisory
secunia.com/advisories/22676
secunia.com/advisories/22730
secunia.com/advisories/22764
secunia.com/advisories/23678
security.gentoo.org/glsa/glsa-200611-03.xml
securityreason.com/securityalert/1742
securitytracker.com/id
sunsolve.sun.com/search/document.do
kb.cert.org/vuls/id/147252 · US Government Resource
mandriva.com/security/advisories
rapid7.com/advisories/R7-0025.jsp · Vendor Advisory
securityfocus.com/archive/1/448860/100/0/threaded
securityfocus.com/archive/1/451329/100/0/threaded
securityfocus.com/bid/20559
ubuntu.com/usn/usn-377-1
vupen.com/english/advisories/2006/4053
vupen.com/english/advisories/2006/4328
exchange.xforce.ibmcloud.com/vulnerabilities/29622

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free