Buffer overflow in NVIDIA GPU Driver

CVE-2013-0131

Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor.

Vulnerability class: Buffer Overflow

EPSS: 0.048 (91.0th percentile) — read the EPSS interpretation.

Affected products

Nvidia Gpu_driver — versions 195.22, 310.00, 313.00
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cret@cert.org (vendor-advisory, x_refsource_GENTOO)
cret@cert.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cret@cert.org (x_refsource_CONFIRM)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)