PT-2007-1105 · Nvidia · Nvidia Driver

Greg + 1 · Published 2007-07-27 · Updated 2009-12-28 · CVE-2007-3532

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: nvidia-drivers versions before 1.0.7185 nvidia-drivers versions before 1.0.9639 nvidia-drivers versions before 100.14.11

Description: The issue allows local users to modify video card settings, cause a denial of service, and obtain sensitive information due to insecure permissions of /dev/nvidia* device files. Exploitation of this issue can lead to a violation of confidentiality, integrity, and availability of protected information.

Recommendations: For versions before 1.0.7185, update to version 1.0.7185 or later. For versions before 1.0.9639, update to version 1.0.9639 or later. For versions before 100.14.11, update to version 100.14.11 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-09586

CVE-2007-3532

Affected Products

Nvidia Driver

References · 9

• http://secunia.com/advisories/26497 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200708-14.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09586 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-3532 · Security Note
• http://securityfocus.com/bid/25363 · Note
• http://security.gentoo.org/glsa/glsa-200708-14.xml · Note
• http://securityfocus.com/bid/25360 · Note
• https://bugs.gentoo.org/show_bug.cgi?id=183567 · Note
• http://osvdb.org/40177 · Note