PT-2007-1105 · Nvidia · Nvidia Driver

Greg + 1 · Publicado 2007-07-27 · Atualizado 2009-12-28 · CVE-2007-3532

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: nvidia-drivers versions before 1.0.7185 nvidia-drivers versions before 1.0.9639 nvidia-drivers versions before 100.14.11

Description: The issue allows local users to modify video card settings, cause a denial of service, and obtain sensitive information due to insecure permissions of /dev/nvidia* device files. Exploitation of this issue can lead to a violation of confidentiality, integrity, and availability of protected information.

Recommendations: For versions before 1.0.7185, update to version 1.0.7185 or later. For versions before 1.0.9639, update to version 1.0.9639 or later. For versions before 100.14.11, update to version 100.14.11 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-09586

CVE-2007-3532

Produtos afetados

Nvidia Driver

Referências · 9

• http://secunia.com/advisories/26497 · Aviso do Fabricante
• http://securityfocus.com/bid/25363 · Nota
• http://gentoo.org/security/en/glsa/glsa-200708-14.xml · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200708-14.xml · Nota
• http://securityfocus.com/bid/25360 · Nota
• https://bdu.fstec.ru/vul/2015-09586 · Nota de Segurança
• https://bugs.gentoo.org/show_bug.cgi?id=183567 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3532 · Nota de Segurança
• http://osvdb.org/40177 · Nota