CVE-2006-5379 Memory corruption in n/a
Local and remote attackers can execute arbitrary code via memory corruption in the NVIDIA Linux graphics driver triggered by a large font glyph width.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-5379?
CVE-2006-5379 is a high-severity memory corruption vulnerability in n/a, published on 18 Oct 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
Which versions are affected by CVE-2006-5379?
It affects 1 product.
Products include Nvidia Binary Graphics Driver.
How do I fix CVE-2006-5379?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2006-5379 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-5379 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as DEBIAN-CVE-2006-5379, GHSA-fm97-p25w-w6fj.