Linked by Thom Holwerda on Mon 16th Oct 2006 22:26 UTC, submitted by Johan M;son Lindman
A recent security advisory announced today by Rapid7 explains, "the NVIDIA Binary Graphics Driver for Linux is vulnerable to a buffer overflow that allows an attacker to run arbitrary code as root. This bug can be exploited both locally or remotely (via a remote X client or an X client which visits a malicious web page). A working proof-of-concept root exploit is attached to this advisory." The advisory goes on to note that the FreeBSD and Solaris binary drivers are also likely vulnerable and cautions, "it is our opinion that NVIDIA's binary driver remains an unacceptable security risk based on the large numbers of reproducible, unfixed crashes that have been reported in public forums and bug databases."
Thread beginning with comment 172404
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
Member since:
2005-12-31
> There is always the option of using open source drivrs, no one is
> forceing anyone to use close source. Only if they want decent 3d.
I think it is a bit unrealistic to expect anyone with an nVidia card *not* to want decent 3d features and performance. After all, they have paid a lot of money for their graphics card.