GLSA-200611-03 : NVIDIA binary graphics driver: Privilege escalation vulnerability
High Nessus Plugin ID 23668
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-200611-03 (NVIDIA binary graphics driver: Privilege escalation vulnerability)
Rapid7 reported a boundary error in the NVIDIA binary graphics driver that leads to a buffer overflow in the accelerated rendering functionality.
An X client could trigger the buffer overflow with a maliciously crafted series of glyphs. A remote attacker could also entice a user to open a specially crafted web page, document or X client that will trigger the buffer overflow. This could result in the execution of arbitrary code with root privileges or at least in the crash of the X server.
Disable the accelerated rendering functionality in the Device section of xorg.conf :
Option 'RenderAccel' 'false'
SolutionNVIDIA binary graphics driver users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=x11-drivers/nvidia-drivers-1.0.8776'