PT-2012-1134 · Nvidia · Nvidia Unix Driver

Publicado 2012-04-22 · Atualizado 2017-12-29 · CVE-2012-0946

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NVIDIA UNIX driver versions prior to 295.40

Description The issue allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges, potentially leading to a breach of confidentiality, integrity, and availability of protected information. This can be exploited locally.

Recommendations For versions prior to 295.40, update to version 295.40 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-09661

CVE-2012-0946

Produtos afetados

Nvidia Unix Driver

Referências · 12

• 🔥 https://exploit-db.com/exploits/20201 · Exploit
• http://secunia.com/advisories/48793 · Nota
• http://secunia.com/advisories/48650 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74822 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-0946 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0946 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-201206-19.xml · Nota
• http://ubuntu.com/usn/usn-1420-1 · Aviso do Fabricante
• http://nvidia.custhelp.com/app/answers/detail/a_id/3109 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09661 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2012-0946 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2012-0946 · Aviso do Fabricante