GLSA 200611-03: NVIDIA binary graphics driver: Privilege escalation vulnerability

http://security.gentoo.org/

Severity:	high
Title:	NVIDIA binary graphics driver: Privilege escalation vulnerability
Date:	11/07/2006
Bugs:	#151635
ID:	200611-03

Synopsis

The NVIDIA binary graphics driver is vulnerable to a local privilege escalation through an X session.

Background

The NVIDIA binary graphics driver from NVIDIA Corporation provides the kernel module and the GL modules for graphic acceleration on the NVIDIA based graphic cards.

Affected packages

Package	Vulnerable	Unaffected	Architecture(s)
x11-drivers/nvidia-drivers	< 1.0.8776	>= 1.0.8776	All supported architectures

Description

Rapid7 reported a boundary error in the NVIDIA binary graphics driver that leads to a buffer overflow in the accelerated rendering functionality.

Impact

An X client could trigger the buffer overflow with a maliciously crafted series of glyphs. A remote attacker could also entice a user to open a specially crafted web page, document or X client that will trigger the buffer overflow. This could result in the execution of arbitrary code with root privileges or at least in the crash of the X server.

Workaround

Disable the accelerated rendering functionality in the Device section of xorg.conf :

Option      "RenderAccel" "false"

Resolution

NVIDIA binary graphics driver users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=x11-drivers/nvidia-drivers-1.0.8776"

References

CVE-2006-5379

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200611-03.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.