PT-2012-1175 · Nvidia · Nvidia Driver

Marc Deslauriers · Publicado 2012-11-19 · Atualizado 2013-08-22 · CVE-2012-4225

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions nvidia-drivers versions prior to 304.88

Description The issue concerns multiple vulnerabilities in the nvidia-drivers package, which can be exploited locally to compromise the confidentiality, integrity, and availability of protected information. Specifically, it allows local users to write to arbitrary physical memory locations and gain privileges by modifying the VGA window using /dev/nvidia0.

Recommendations For versions prior to 304.88, update to version 304.88 or later to resolve the issue. As a temporary workaround, consider restricting access to /dev/nvidia0 to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-09717

CVE-2012-4225

Produtos afetados

Nvidia Driver

Referências · 11

• https://osv.dev/vulnerability/CVE-2012-4225 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/08/01/1 · Nota
• http://nvidia.custhelp.com/app/answers/detail/a_id/3140 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09717 · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-201304-01.xml · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2012/Aug/76 · Nota
• http://seclists.org/fulldisclosure/2012/Aug/4 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-4225 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/08/08/4 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-4225 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-4225 · Nota de Segurança